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About This Book 


The primary objective of this manual is to help communications system designers build 
systems using the Motorola MPC850 and to help software designers provide operating 
systems and user-level applications to take fullest advantage of the MPC850. 





Although this book describes aspects regarding the PowerPC™ architecture that are critical 
for understanding the MPC850 core, it does not contain a complete description of the 
architecture. Where additional information might help the reader, references are made to 
The PowerPC Microprocessor Family: The Programming Environments. Ordering 
information for this book are provided in the section, “PowerPC Documentation.” 


The information in this book is subject to change without notice, as described in the 
disclaimers on the title page of this book. As with any technical documentation, it is the 
readers’ responsibility to be sure they are using the most recent version of the 
documentation. For more information, contact your sales representative. 


Before Using this Manual 


Before using this manual, determine whether it is the latest revision and if there are errata 
or addenda. To locate any published errata or updates for this document, refer to the world- 
wide web at http://www.motorola.com/SPS/RISC/netcomm. 


Audience 


This manual is intended for software and hardware developers and application 
programmers who want to develop products for the MPC850. It is assumed that the reader 
has a basic understanding of computer networking, OSI layers, and RISC architecture. In 
addition, it is assumed that the reader has a basic understanding of the communications 
protocols described here. Where it is considered useful, additional sources are provided that 
provide in-depth discussions of such topics. 
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Organization 
Following is a summary and a brief description of the chapters of this manual: 


e Part I, “Overview,” provides a high-level description of the MPC850, describing 
general operation and listing basic features. 


— Chapter 1, “Overview, ” provides a high-level description of MPC850 functions 
and features. It roughly follows the structure of this book, summarizing the 
relevant features and providing references for the reader who needs additional 
information. 


— Chapter 2, “Memory Map,” presents a table showing where MPC850 registers 
are mapped in memory. It includes cross references that indicate where the 
registers are described in detail. 


¢ Part II, “PowerPC Microprocessor Module,” describes the PowerPC microprocessor 
core embedded in the MPC850. These chapters provide details concerning the 
processor core as an implementation of the PowerPC architecture. 


— Chapter 3, “The PowerPC Core,’ provides an overview of the MPC850 core, 
summarizing topics described in further detail in subsequent chapters in Part II. 


— Chapter 4, “PowerPC Core Register Set,” describes the hardware registers 
accessible to the MPC850 core. These include both architecturally-defined and 
MPC850-specific registers. | 


_— Chapter 5, “MPC850 Instruction Set,’ describes the PowerPC instructions 
implemented on the MPC850, including MPC850-specific features. 


— Chapter 6, “Exceptions,” describes the PowerPC exception model as it is 
implemented on the MPC850. 


— Chapter 7, “Instruction and Data Caches,” describes the organization of the on- 
chip instruction and data caches, cache control, various cache operations, and the 
interaction between the caches, the load/store unit (LSU), the instruction 
sequencer, and the system interface unit (SIU). 


— Chapter 8, “Memory Management Unit” describes how the PowerPC MMU 
model is implemented on the MPC850. Although the MPC850 MMU is based 
on the PowerPC MMU model, it differs greatly in many respects, which are 
described in this chapter. | 


— Chapter 9, “Instruction Execution Timing,’ describes the MPC850 instruction 
unit, and provides ways to make greatest advantage of its RISC architecture 
characteristics, such as pipelining and parallel execution. It includes a table of 
instruction latencies and lists dependencies and potential bottlenecks. 
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e Part I, “Configuration and Reset,’ describes start-up behavior of the MPC850. 


— Chapter 10, “System Interface Unit,” describes the SIU, which controls system 
start-up, initialization and operation, protection, as well as the external system 
bus. 


— Chapter 11, “Reset,” describes the behavior of the MPC850 at reset and start-up. 


e Part IV, “The Hardware Interface,” descibes external signals, clocking, memory 
control, and power management of the MPC850. 


— Chapter 12, “External Signals,” provides a detailed description of the external 
signals that comprise the MPC850 external interface. 


— Chapter 13, “External Bus Interface,” describes the interaction between signals 
described in the previous chapter, including numerous examples and timing 
diagrams. 


— Chapter 14, “Clocks and Power Control,’ describes on-chip and external 
devices, including the phase-locked loop circuitry and frequency dividers that 
generate programmable clock timing for baud-rate generators, timers, and a 
variety of low-power mode options. 


— Chapter 15, “Memory Controller,’ describes the memory controller, which 
controlling a maximum of eight memory banks shared between a general- 
purpose chip-select machine (GPCM) and a pair of user-programmable 
machines (UPMs). 


— Chapter 16, “PCMCIA Interface,’ describes the PCMCIA host adapter module, 
which provides all control logic for a PCMCIA socket interface and requires 
only additional external analog power switching logic and buffering. 

e Part V, “Communications Processor Module,’ describes the configuration, clocking, 
and operation of the various communications protocols supported by the MPC850. 
— Chapter 17, “Communications Processor Module and CPM Timers,” provides a 

brief overview of the MPC850 CPM and a detailed discussion of the clocking 
mechanisms supported. 

— Chapter 18, “Communications Processor,’ describes the RISC communications 
processor (CP), which handles the low-level communications tasks, freeing the 
core for higher-level tasks. 

— Chapter 19, “SDMA Channels and IDMA Emulation,’ describes the two 
physical serial DMA (SDMA) channels on the MPC850 with which the CP 
implements fourteen virtual SDMA channels. 

— Chapter 20, “Serial Interface,’ describes the serial interface (SI) in which the 
physical interface to all SCCs and SMCs is implemented. 
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Chapter 21, “Serial Communications Controllers,” describes the two serial 
communications controllers (SCC), which can be configured independently to 
implement different protocols for bridging functions, routers, and gateways, and 
to interface with a wide variety of standard WANs, LANs, and proprietary 


networks. 


Chapter 22 “SCC UART Mode,’ describes the MPC850 implementation of 
universal asynchronous receiver transmitter (UART) protocol, used for sending 
low-speed data between devices. 


Chapter 23, “SCC HDLC Mode,” describes the MPC850 implementation of 
HDLC protocol. 


Chapter 24, “SCC AppleTalk Mode,’ dexetibes the MPC850 implementation of 
AppleTalk, a set of protocols developed by Apple Computer, Inc. to  PIOvne a 
LAN service between Macintosh computers and printers. 


Chapter 25, “SCC Asynchronous HDLC Mode,’ describes the asynchronous 


HDLC and IrDA use of HDLC framing techniques with UART-type characters. 


Chapter 26, “SCC BISYNC Mode,” describes the MPC850 implementation of 
byte-oriented BISYNC protocol developed by IBM for use in networking 
products. 


Chapter 27, “SCC Ethernet Mode,” describes the MPC850 implementation of 
Ethernet protocol. 


Chapter 28, “SCC Transparent Mode,’ describes the MPC850 implementation of 
transparent mode (also called totally transparent mode), which provides a clear 
channel on which the SCC can send or receive serial data without bit-level 
manipulation. 


Chapter 30, “Serial Management Controllers; describes two serial management 
controllers, full-duplex ports that can be configured independently to support one 
of three protocols—UART, transparent, or general-circuit interface (GCI). 


Chapter 31, “Serial Peripheral Interface,” describes the serial peripheral 
interface, which allows the MPC850 to exchange data between other MPC850 
chips, the MC68360, the MC68302, the M68HC11 and M68HCO05 
microcontroller families, and peripheral devices such as EEPROMS, real-time 
clocks, A/D converters, and ISDN devices. | 


Chapter 32, “Universal Serial Bus Controller?’ describes the MPC850 
implementation of the universal serial bus, an industry-standard extension to the 
PC architecture that supports data exchange between the MPC850 and a PC host 
and a wide range of simultaneously accessible peripherals. 


Chapter 33, “I2C Controller,” describes the MPC850 implementation of the 
inter-integrated circuit (I?C®) controller, which allows data to be exchanged with 
other °C devices, such as microcontrollers, EEPROMs, real-time clock devices, 
and A/D converters. 
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— Chapter 34, “Parallel I/O Ports,’ describes the four general-purpose I/O 
ports—A, B, C, and D. Each signal in the I/O ports can be configured as a 
general-purpose I/O signal or as a signal dedicated to supporting 
communications devices, such as SMCs and SCCs. 


— Chapter 35, “CPM Interrupt Controller,’ describes how the CPM interrupt 
controller (CPIC) accepts and prioritizes the internal and external interrupt 
requests from the CPM blocks and passes them to the system interface unit 
(SIU). The CPIC also provides a vector during the core interrupt acknowledge 
cycle. 

e Part VI, “System Debugging and Testing Support,” describes how to use the 

MPC850 facilities for debugging and system testing. 

— Chapter 36, “System Development and Debugging,” describes support provided 
for program flow tracking, internal watchpoint and breakpoint generation, and 
emulation systems control. 

— Chapter 37, “IEEE 1149.1 Test Access Port,” describes the dedicated user- 
accessible test access port (TAP), which is fully compatible with the JEEE 
1149.1 Standard Test Access Port and Boundary Scan Architecture. 

e Appendix A, “Byte Ordering,’ discusses the MPC850 implementation of little- and 
big-endian byte mapping. 

e Appendix B, “Serial Communications Performance, provides insight in 
maximizing performance of MPC850-based systems. 


e Appendix C, “Register Quick Reference Guide,” contains a quick reference guide to 
the MPC850 registers. 


e Appendix D, “Instruction Set Listings,” contains tables of the PowerPC instructions 
supported by the MPC850. 


e This manual also includes a glossary and an index. 
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Suggested Reading 


This section lists additional reading that provides backend for the information in this 
manual as well as general information about the PowerPC architecture. 


MPC8xx Documentation 


Supporting documentation for the MPC850 can be accessed through the world-wide web 
at http://www.motorola.com/SPS/RISC/netcomm. This documentation includes technical 
specifications, reference materials, and detailed applications notes. 


PowerPC Documentation 
The PowerPC documentation is organized in the following types of documents: 


e User’s manuals— These books provide details about individual PowerPC 
implementations and are intended to be used in conjunction with The Programming 
Environments Manual. These include the following: 


— PowerPC 603e™ RISC Microprocessor User’s Manual with Supplement for 
PowerPC 603™ Microprocessor (Motorola order #: MPC603EUM/AD) 


— PowerPC 604™ RISC Microprocessor User’s Manual 
(Motorola order #: MPC604UM/AD) 


¢ Programming environments manuals— These books provide information about 
resources defined by the PowerPC architecture that are common to PowerPC 
processors. There are two versions, one that describes the functionality of the 
combined 32- and 64-bit architecture models and one that describes only the 32-bit 
model. 


— PowerPC Microprocessor Family: The Programming Environments, Rev | 
(Motorola order #: MPCFPE/AD) 


— PowerPC Microprocessor Family: The Programming Environments for 32-Bit 
Microprocessors, Rev. 1 (Motorola order #: MPCFPE32B/AD) 


¢ PowerPC Microprocessor Family: The Bus Interface for 32-Bit Microprocessors 
(Motorola order #: MPCBUSIF/AD) provides a detailed functional description of 
the 60x bus interface, as implemented on the PowerPC 601™ , 603, and 604 family 
of PowerPC microprocessors. This document is intended to help system and chip set 
developers by providing a centralized reference source to identify the bus interface 
presented by the 60x family of PowerPC microprocessors. 


¢ PowerPC Microprocessor Family: The Programmer’s Reference Guide 
(Motorola order #: MPCPRG/D) is a concise reference that includes the register 
summary, memory control model, exception vectors, and the PowerPC instruction 
set. 


¢ PowerPC Microprocessor Family: The Programmer’s Pocket Reference Guide 
(Motorola order #: MPCPRGREF/D). This feedlot card provides an overview of the 
PowerPC registers, instructions, and exceptions for 32-bit implementations. 
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e Application notes—These short documents contain useful information about 
specific design issues useful to programmers and engineers working with PowerPC 
processors. 


For a current list of PowerPC documentation, refer to the world-wide web at 
http://www.mot.com/SPS/PowerPC/. 


Conventions 

This document uses the following notational conventions: 

Bold entries in figures and tables showing registers and parameter 
RAM should be initialized by the user. 

mnemonics Instruction mnemonics are shown in lowercase bold. 

italics Italics indicate variable command parameters, for example, bectrx. 


Book titles in text are set in italics. 


Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

rA,rB Instruction syntax used to identify a source GPR 

rD Instruction syntax used to identify a destination GPR 
REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
mode enable bit in the machine state register. 


X In certain contexts, such as in a Signe encoding or a bit field, 
indicates a don’t care. 

n Used to express an undefined numerical value 

a NOT logical operator 

& AND logical operator 

| OR logical operator 
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Acronyms and Abbreviations 


Table i contains acronyms and abbreviations used in this document. Note that the meanings 
for some acronyms (such as SDR1 and DSISR) are historical, and the words for which an 
acronym stands may not be intuitively obvious. | 


Tabie i. Acronyms and Abbreviated Terms 


Analog-to-digital 
Arithmetic logic unit 






ATM | Asynchronous transfer mode 


/ a ; 
L : : 
s : 
Buffer descriptor 
BIST Built-in self test 
Branch processing unit 
A | 7 
A 









BRE Basic rate interface 
BUID Bus unit ID | 
Content-addressable memory 


CEPT Conference des administrations Europeanes des Postes et Telecommunications (European 
Conference of Postal and Telecommunications Administrations). 


ic Communications processor 
cpm | Communications processor module 


Condition register 


AID 
ALU 

ATM 

BPU 

CAM 

cP 

CPM 

CR | 

DAR 

DEC 
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DABR Data address breakpoint register | | 
DAR Data address register 
DEC Decrementer register | | 
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Term 


FPU 
GCI 
GPCM 


GUI 


ak 
5 
we) 


HDLC 
I2C 
IDL 
IEEE 
IrDA 
| ISDN 
| ITLB 


a 


JTAG 
LIFO 


mu) 


| LRU 
LSB 


LSU 


MAC 
MESI 


Wy 


MU 
MSB 
msb 


MSR 


NaN 
NIA 
NMS! 


| No-op 


OEA 
OSI 


Sore 
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Table i. Acronyms and Abbreviated Terms (Continued) 


Floating-point unit 

General circuit interface 
General-purpose chip-select machine 
General-purpose register 

Graphical user interface 

High-level data link control 
Inter-integrated circuit 

Inter-chip digital link 


Institute of Electrical and Electronics Engineers 


Infrared Data Association 


Integrated services digital network 


Instruction translation lookaside buffer 


| Integer unit 
| Joint test action group 

Last-in-first-out 

Link register 

Least recently used 

Least-significant byte 

Least-significant bit 

Load/store unit 

Multiply accumulate 

Modified/exclusive/shared/invalid—cache coherency protocol 

Memory management unit 

Most-significant byte 

Most-significant bit 

Machine state register 


Not a number 


Next instruction address 


Nonmultiplexed serial interface 


No operation 


Operating environment architecture 


| Open systems interconnection 





SRR SREB SRLS EEL 
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Table i. Acronyms and Abbreviated Terms (Continued) 


Term Meaning 


J 
x< 


PCI Peripheral component interconnect 
PCMCIA Personal Computer Memory Card International Association 
Processor identification register 


Primary rate interface 


PVR Processor version register 
RISC Reduced instruction set computing 


RTOS Real-time operating system 
RWITM Read with intent to modify 


Receive 


op) 
QO 
O 


Serial communications controller 
| SCP Serial control port 
SDLC 
SDMA 
Ss 


Synchronous Data Link Control 


Serial DMA 


Serial interface 


SIMM Signed immediate value 


SIU System interface unit 
SMC Serial management controller 


NA 


P 


Systems network architecture 
SPI Serial peripheral interface 


SPR Special-purpose register 


SPRGn Registers available for general purposes 


SRAM | Static random access memory 
SRRO Machine status save/restore register 0 


SRR1 Machine status save/restore register 1 


TAP Test access port 
Time base register 

TDM Time-division multiplexed 

TLB Translation lookaside buffer 


TSA Time-slot assigner 


~| 


x< Ww 


Transmit 


UART Universal asynchronous receiver/transmitter 


UIMM Unsigned immediate value 
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Table i. Acronyms and Abbreviated Terms (Continued) 


UISA User instruction set architecture 
User-programmable machine 


Universal synchronous/asynchronous receiver/transmitter 


Universal serial bus 


bvA | Virtual address 


VEA Virtual environment architecture 





XER Register used primarily for indicating conditions such as carries and overflows for integer operations 


PowerPC Architecture Terminology Conventions 


Table 11 lists certain terms used in this manual that differ from the architecture terminology 
conventions. 


Table ii. Terminology Conventions 


The Architecture Specification This Manual 


| Data storage interrupt (DSI) | DSI exception 
Extended mnemonics | Simplified mnemonics 
Instruction storage interrupt (IS!) Isl exception 
| Interrupt _ | Exception 
| Privileged mode (or privileged state) Supervisor-level privilege 
| Problem mode (or problem state) User-level privilege 
Real address | Physical address 


| Relocation | Translation 


| Storage (locations) Memory 





Storage (the act of) Access 





MOTOROLA About This Book | Ixix 


Table iii describes instruction field notation conventions used in this manual. 


Table iii. Instruction Field Conventions 


BA, BB, BT crbA, crbB, crbD (respectively) 
BF, BFA crfD, crfS ( (respectively) 










RA, RB, RT, RS rA, rB, rD, rS (respectively) 


UIMM 
AM, Mt 0...0 (shaded) 
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Intended Audience 
Part I is intended for anyone who needs a high-level understanding of the MPC850. 


Contents 


Part I provides an overview of the features and functions of the MPC850. 
It includes the following chapters: 


e Chapter 1, “Overview,” provides a high-level description of MPC850 functions and 
features. It roughly follows the structure of this book, summarizing the relevant 
features and providing references for the reader who needs additional information. 


e Chapter 2, “Memory Map,” presents a table showing where MPC850 registers are 
mapped in memory. It includes cross references that indicate where the registers are 
described in detail. 


Conventions 

Part I uses the following notational conventions: 

mnemonics Instruction mnemonics are shown in lowercase bold. 

italics Italics indicate variable command parameters, for example, bectrx. 
Book titles in text are set in italics. 

Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

rA,rB Instruction syntax used to identify a source GPR 

rD Instruction syntax used to identify a destination GPR 

REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
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mode enable bit in the machine state register. 


x In certain contexts, such as in a signal encoding or a bit field, 
indicates a don’t care. 


n Indicates an undefined numerical value 


Acronyms and Abbreviations 


Table iv contains acronyms and abbreviations that are used in this document. 


Table iv. Acronyms and Abbreviated Terms 


ee 
PED Buffer descriptor 
| Branch processing unit 











[seo 

[or | Cmmuntatonsperese 
[crn | Conmniotenpesesormeaie 
[ows [Oe noneyenss 







BPU 

CP 

CPM 

DMA 

pa | mernenseret SSCS 
a 
[SON [reomossovenscatlnawee 
Integer unit _ 

[as [Nomina wiaomee 
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Table iv. Acronyms and Abbreviated Terms (Continued) 


Open systems interconnection 


Peripheral component interconnect 
PCMCIA Personal Computer Memory Card International Association 
RISC Reduced instruction set computing 


Real-time operating system 





















Receive 






r 
Mc 
z 
7 
[ian 

PM | i 


User-programmable machine 
Virtual environment architecture 
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Chapter Tf 
Overview 


This chapter provides an overview of the MPC850 integrated communications 
microprocessor, describing major functions and features. It includes a block diagram and a 
comparison between the MPC850 and the MPC860. 


The MPC850 is a versatile, one-chip integrated microprocessor and peripheral combination 
that can be used in a variety of controller applications, excelling particularly in 
communications and networking products. The MPC850, which includes support for 
Ethernet, is specifically designed for  cost-sensitive, remote-access, and 
telecommunications applications. It is provides functions similar to the MPC860, with 
system enhancements such as universal serial bus (USB) support and a larger (8-Kbyte) 
dual-port RAM. 


In addition to a high-performance embedded PowerPC core, the MPC850 integrates system 
functions, such as a versatile memory controller and a communications processor module 
(CPM) that incorporates a specialized, independent RISC communications processor 
(referred to as the CP). This separate processor off-loads peripheral tasks from the 
embedded PowerPC core. 


The CPM of the MPC850 supports up to seven serial channels, as follows: 


e One or two serial communications controllers (SCCs). The SCCs support Ethernet, 
ATM (MPC850SAR), HDLC and a number of other protocols, along with a 
transparent mode of operation. Up to 64 logical HDLC channels can be supported 
on a single SCC. 


e One USB channel, two serial management controllers (SMCs) 
e One I’C port 
e One serial peripheral interface (SPI). 


Table 1-1 shows the functionality supported by the members of the MPC850 family: 
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Table 1-1. MPC850 Functionality Matrix 


USB Support SCC Support ATM Support 


No USB port One SCC—SCC2 


MPC850. -|One USBport | One SCC—SCC2 = | 
MPC850DC |One USB port | Two SCCs; SCC2 supports Ethernet I- | 






MPC850SE 





MPC850DE {One USB port | Two SCCs; both support Ethernet | 
MPC850DH |One USB port | Two SCCs; both support Ethernet and multi-channel HDLC 


MPC850SAR |} One USB port | Two SCCs: both support Ethernet, multi-channel HDLC, and serial | UTOPIA 
| AIM interface 


Additional documentation may be provided for parts listed in Table 1-1. 








1.1 Features 


Figure 1-1 is a block diagram of the MPC850, showing its major components and the 
relationships among those components: 
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2-Kbyte System Interface Unit 
| Cache 
ee en Be er i ehaion Memory Controller 


PowerPC Bus MMU Unified Bus Bus Interface Unit 
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sc lide PCMCIA Interface 











Communications 
Baud Rate Four Interrupt Dual-Port 14 Virtual Processor 
Generators {| Timers | Controller RAM Serial DMA Module 
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= tote VO 32-Bit RISC Communications and 
is Processor (CP) and Program ROM 
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Peripheral Bus 
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2 
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Ns Time Slot Assigner | 


Non-Multiplexed Serial Interface 








Figure 1-1. MPC850 Microprocessor Block Diagram 


The following list summarizes the main features of the MPC850: 


e Embedded PowerPC core 


— Single-issue, 32-bit version of the embedded PowerPC core (fully compatible 
with PowerPC user instruction set architecture definition) with 32 x 32-bit 
integer registers 


— Performs branch folding and branch prediction with conditional prefetch, but 
without conditional execution 


— 2-Kbyte data cache and 1-Kbyte instruction cache (Harvard architecture) 
— Caches are two-way, set-associative 
— Physically addressed 
— Cache blocks can be updated with a 4-word line burst 
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— Least-recently used (LRU) replacement algorithm 
— Lockable one-line granularity 


— Memory management units (MMUs) with 8-entry translation lookaside buffers 
(TLBs) and fully-associative instruction and data TLBs 


— MMwUs support multiple page sizes of 4 Kbytes, 16 Kbytes, 256 Kbytes, 512 
Kbytes, and 8 Mbytes; 16 virtual address spaces and eight protection groups 


Advanced on-chip emulation debug mode 
Data bus dynamic bus sizing for 8-, 16-, and 32-bit buses 


— Supports traditional 68000 big-endian, traditional x86 little-endian and PowerPC 
little-endian memory systems 


— Twenty-six external address lines 
Completely static design (0-66 MHz operation) 
System integration unit (SIU) 

— Hardware bus monitor 

— Spurious interrupt monitor 

— Software watchdog 

— Periodic interrupt timer 

— Low-power stop mode 

— Clock synthesizer 

— PowerPC decrementer 

— Real-time clock and PowerPC time base 
— Reset controller 

— TEEE 1149.1 test access port (JTAG) 
Memory controller (eight banks) 


— Glueless interface to DRAM single in-line memory modules (SIMMs), 
synchronous DRAM (SDRAM), static random-access memory (SRAM), 
electrically programmable read-only memory (EPROM), flash EPROM, etc. 


— Memory controller programmable to support most size and speed memory 
interfaces 


— Boot chip- -select available at reset (options for 8-, 16-, or 32-bit i memory) 
— Variable block sizes, 32 Kbyte to 256 Mbyte 

— Selectable write protection 

— On-chip bus arbitration supports external bus master 

— Special features for burst mode support 

General-purpose timers 

— Four 16-bit timers or two 32-bit timers 

— Gate mode can enable/disable counting 

— Interrupt can be masked on reference match and event capture 


SPSS 
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e Interrupts 
— Eight external interrupt request (IRQ) lines 
— Twelve port pins with interrupt capability 
— Fifteen internal interrupt sources 
— Programmable priority among SCCs and USBs 
— Programmable highest-priority request 
e Single socket PCMCIA-ATA interface 
— Mastcr (socket) interface, release 2.1 compliant 
— Single PCMCIA socket 
— Supports eight memory or I/O windows 
e Communications processor module (CPM) 
— 32-bit, Harvard architecture, scalar RISC communications processor (CP) 


— Protocol-specific command sets (for example, GRACEFUL STOP TRANSMIT stops 
transmission after the current frame is finished or immediately if no frame is 
being sent and CLOSE RXBD closes the receive buffer descriptor) 


— Up to 384 buffer descriptors (BDs) 
— Supports continuous mode transmission and reception on all serial channels 
— Up to 8 Kbytes of dual-port RAM 
— Fourteen serial DMA (SDMA) channels 
— Three parallel I/O registers with open-drain capability 
¢ Four independent baud-rate generators (BRGs) 
— Can be connected to any SCC, SMC, or USB 
— Allow changes during operation 
— Autobaud support option 
¢ Two SCCs (serial communications controllers) | 
— Ethernet/IEEE 802.3, supporting full 10-Mbps operation 
— HDLC/SDLC™ (all channels supported at 2 Mbps) 
— HDLC bus Gmplements an HDLC-based local area network (LAN)) 
— Asynchronous HDLC to support PPP (point-to-point protocol) 
— AppleTalk™ 
— Universal asynchronous receiver transmitter (UART) 
— Synchronous UART 
— Serial infrared (IrDA) 
— Totally transparent (bit streams) 
— ‘Totally transparent (frame based with optional cyclic redundancy check (CRC)) 
e QUICC multichannel controller (QMC) microcode features 
— Up to 64 independent communication channels on a single SCC 
— Arbitrary mapping of 0-31 channels to any of 0-31 TDM time slots 
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— Supports either transparent or HDLC protocols for each channel 

— Independent TxBDs/Rx and event/interrupt reporting for each channel 
Two serial management controllers (SMCs) | 

— UART 

— Transparent 


-— General circuit interface (GCI) controller 


— Can be connected to the time-division-multiplexed (TDM) channel 
One serial peripheral interface (SPI) 

— Supports master and slave modes 

— Supports multimaster operation on the same bus 


One 7?C® (interprocessor-integrated circuit) port 

— Supports master and slave modes 

— Supports multimaster environment 

Time slot assigner 

— Allows SCCs and SMCs to run in multiplexed operation 


— Supports T1, CEPT, PCM highway, ISDN basic rate, ISDN primary rate, 
user-defined 


— |-or 8-bit resolution 

— Allows independent transmit and receive routing, frame syncs, clocking 

— Allows dynamic changes | 

— Can be internally connected to four serial channels (two SCCs and two SMCs) 
Low-power support | 

— Full high: all units fully powered at high clock frequency 

— Full low: all units fully powered at low clock frequency 


— Doze: core functional units disabled except time base, decrementer, PLL, 
memory controller, real-time clock, and CPM in low-power standby 


— Sleep: all units disabled except real-time clock and periodic interrupt timer. PLL 
is active for fast wake-up 


— Deep sleep: all units disabled including PLL, except the real-time clock and 
periodic interrupt timer 


— Low-power stop: to provide lower power dissipation 


— Separate power supply input to operate internal logic at 2.2 V when operating at 
or below 25 MHz 


— Can be dynamically shifted between high frequency (3.3 V internal) and low 
frequency (2.2 V internal) operation 
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e Debug interface 
— Eight comparators: four operate on instruction address, two operate on data 
address, and two operate on data 
— The MPC850 can compare using the =, #, <, and > conditions to generate 
watchpoints 


— Each watchpoint can generate a breakpoint internally 
e 3.3-V operation with 5-V TTL compatibility 


1.2 Overview of Major Components 


As shown in Figure 1-1, the MPC850 adopts a dual-processor design, providing a 
high-performance embedded PowerPC core for application programming use and a 
communications processor module that contains a special-purpose 32-bit scalar RISC 
communications processor (CP). 


Components of the MPC850 are described in the following sections following the 
organizational structure of this manual. 


e Part I, “PowerPC Microprocessor Module,’ describes the PowerPC microprocessor 
core embedded in the MPC850. These chapters provide details concerning the 
processor core as an implementation of the PowerPC architecture. This is 
summarized in Section 1.2.1. 


e Part III, “Configuration and Reset,’ describes start-up behavior of the MPC850. This 
is Summarized in Section 1.2.2. 


e Part IV, “The Hardware Interface,’ describes external signals, clocking, memory 
control, and power management of the MPC850. This is summarized in Section 
1.2.3. 


e Part V, “Communications Processor Module,’ describes the configuration, clocking, 
and operation of the various communications protocols supported by the MPC850. 
This 1s summarized in Section 1.2.4. 


e Part VI, “System Debugging and Testing Support,’ describes how to use the 
MPC850 facilities for debugging and system testing. This is summarized in 
Section 1.2.5. 


1.2.1 PowerPC Microprocessor Module 


The PowerPC core has a fully-static design. It executes all integer and load/store operations 
directly on the hardware. The core supports integer operations on a 32-bit internal data path 
and 32-bit arithmetic hardware. Its interface to the internal and external buses is 32 bits. The 
core uses a two-instruction load/store queue, four-instruction prefetch queue, and a 
six-instruction history buffer. 


The core performs branch folding and branch prediction with conditional prefetch, but 
without conditional execution. The core can operate on 32-bit external operands with one 
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bus cycle. The PowerPC integer block supports thirty-two 32-bit general-purpose registers 
(GPRs), which are used as source and destination operands for instruction execution. 


The integer unit typically can execute one integer instruction on each clock cycle. Each 
element in the integer block is clocked only when valid data is present in the data queue and 
ready for operation, which reduces power consumption to the amount needed for an 
operation. | 


The PowerPC processor is integrated with the MMUs and 2-Kbyte instruction and 1-Kbyte 
data caches. The MMUs provide an 8-entry, fully-associative instruction and data TLB, 
with multiple page sizes of 4 Kbytes (1-Kbyte protection), 16 Kbytes, 512 Kbytes, and 
8 Mbytes. It supports 16 virtual address spaces with eight protection groups. Three 
special-purpose registers are provided to support software table searching and updating 
page translations. 


The 2-Kbyte instruction cache is two-way, set associative with physical addressing. It 
allows single-cycle access on hits with no added latency for miss. It has four words per line 
and supports burst linefill using an LRU replacement algorithm. The instruction cache can 
be locked on a line-by-line basis for application-critical routines. 


The 1-Kbyte data cache is two-way, set associative with physical addressing. It allows 
single-cycle access on hit with one added clock latency for miss. It has four words per line 
and supports burst linefill using an LRU replacement algorithm. The data cache can also be 
locked on a line-by-line basis for application-critical routines. It can be programmed to 
Support copy-back or write-through via the MMU. Cache-inhibit mode can be eee 
on a per-page basis. 


1.2.2 Configuration and Reset 


The MPC850 configuration is handled through the system interface unit (SIU), which is 
described in Section 1.2.2.1, “System Interface Unit (SITU).” The MPC850 provides many 
different kinds of reset, as described in Section 1.2.2.2, “Resets.” 


1.2.2.1 System Interface Unit (SIU) 


The SIU controls system start-up, initialization, operation, protection, and the external 
system bus. The system configuration and protection function controls the overall system 
and provides various monitors and timers, including the bus monitor, software watchdog 
timer, periodic interrupt timer (PIT), PowerPC decrementer, timebase, and real-time clock. 
The clock synthesizer generates the clock signals for other modules and external devices 
that the SIU interfaces with. The SIU supports various low-power modes that supply 
different ranges of power consumption, functionality, and wake-up time. The clock scheme 
supports low-power modes for applications that use baud rate generators and/or serial ports 
in standby mode. The main system clock can be changed dynamically; the baud rate 
generators and serial ports work with a fixed frequency. 
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Although the PowerPC core is a 32-bit device internally, it can be configured to operate 
with an 8-, 16-, or 32-bit data bus. Regardless of system bus size, dynamic bus sizing is 
supported, which allows 8-, 16-, and 32-bit peripherals and memory to coexist on the 32-bit 
system bus. The SIU supports traditional 68000 big-endian memory systems, traditional 
x86 little-endian memory systems, and PowerPC little-endian memory systems. 


The memory controller supports up to eight memory banks with glueless interfaces to 
DRAM, SRAM, PSRAM, EPROM, flash EPROM, SDRAM, EDO, and other peripherals 
with two-clock initial access to external SRAM and bursting support. It provides variable 
block sizes from 32 Kbytes to 256 Mbytes. The memory controller provides 0 to 15 wait 
states for each bank of memory and can use address type matching to qualify each memory 
bank access. It provides four byte-enable signals for varying width devices, one output 
enable signal, and one boot chip-select available at reset. 


The DRAM interface supports 8-, 16-, and 32-bit ports. It uses a programmable state 
machine to support almost any memory interface. Memory banks can be defined in depths 
of 256 or 512 Kbytes or 1, 2, 4, 8, 16, 32, or 64 Mbytes for all port sizes. In addition, the 
memory depth can be defined as 64 Kbytes and 128 Kbytes for 8-bit memory or 128 Mbytes 
and 256 Mbytes for 32-bit memory. The DRAM controller supports page mode access for 
successive transfers within bursts. The MPC850 supports a glueless interface to one bank 
of DRAM, while external buffers are required for additional memory banks. The refresh 
unit provides CAS before RAS, a programmable refresh timer, active refresh during 
external reset, the ability to disable refresh, and stacking for a maximum of seven refresh 
cycles. 








The PCMCIA-ATA interface is a master controller that is compliant with release 2.1. The 
interface supports one independent PCMCIA socket with external transceivers or buffers 
required. It provides eight memory or I/O windows that can be allocated to the socket. If 
the PCMCIA port is not being used as a card interface, it can be used as a general-purpose 
input with interrupt capability. 


1.2.2.2 Resets 


The reset block has reset control logic that determines the cause of reset, synchronizes it if 
necessary, and resets the appropriate logic modules. The memory controller, system 
protection logic, interrupt controller, and parallel I/O signals are initialized only on hard 
reset. Soft reset initializes the interna! logic while maintaining the system configuration. 


The MPC850 has several sources of input to the reset logic: 
¢ Power-on reset 
e External hard reset 
e Internal hard reset 
— Loss of lock 
— Software watchdog reset 
— Checkstop reset 
— Debug port hard reset 
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e JTAG reset 
e External soft reset 
e Internal soft reset (debug port soft reset) 


All of these reset sources are fed into the reset controller and, depending on the source of 
the reset, different actions are taken. The reset status register reflects the last source to cause 
a reset. 


1.2.3 MPC850 Hardware Interface 


The MPC850 bus is a synchronous, burstable bus that can support multiple masters. Signals 
driven on this bus are required to make the setup and hold time relative to the bus clock’s 
rising edge. The MPC850 architecture supports byte, half-word, and word operands 
allowing access to 8-, 16-, and 32-bit data ports through the use of synchronous cycles 
controlled by the size outputs (TSIZO, TSIZ1). Access to 16- and 8-bit ports is done for 
slaves controlled by the memory controller. 


The MPC850 bus interface features are listed as follows: 


e 26-bit address bus with transfer size indication 
e 32-bit data bus 


e Dynamic bus sizing to 32-, 16-, or 8-bit ports accessed through the memory 
— controller 


¢ TTL-compatible interface 

¢ Bus arbitration supported optionally by internal or external logic 

¢ Bus arbitration logic on-chip supports an external master with programmable 
priority 

e Compatible with PowerPC architecture 

e Easy to interface to slave devices 

e Bus is synchronous (all signals are referenced to rising edge of bus clock) 

e Contains support for data parity 


The PCMCIA host adapter module provides all control logic for a PCMCIA socket 
interface, and requires only additional external analog power switching logic and buffering. 


1.2.3.1 Signals 


Figure 1-2 shows MPC850 signals grouped by fanciion: Note that many of these signals are 
multiplexed and this figure does not indicate how these signals are multiplexed. 


NOTE 


A bar over a signal name indicates that the signal is active 
low—for example, BB (bus busy). Active-low signals are 
referred to as asserted (active) when they are low and negated 
when they are high. Signals that are not active low, such as 
TSIZ[O—1] (transfer size signals) are referred to as asserted 
when they are high and negated when they are low. 
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1.2.3.2 Clocking and Power Management 


The MPC850 clock system provides many different clocking options for all on-chip and 
external devices. For its clock sources, the MPC850 contains phase-locked loop and crystal 
oscillator support circuitry. The phase-locked loop circuitry can be used to provide a 
high-frequency system clock from a low-frequency external source. Also, to enable flexible 
power control, the MPC850 provides frequency dividers and a variety of low-power mode 
options. 


The MPC850 allows a system to optimize power utilization by providing performance 
on-demand. This is implemented through a variety of programmable power-saving modes 
with automatic wake-up features. 


The main features of the MPC850 clocks and power control system are as follows: 


¢ Contains system PLL (SPLL) 
e Supports crystal oscillator circuits 
e Clock dividers are provided for low-power modes and internal clocks 
e Contains five major power-saving modes 
— Normal (high and low) 
— Doze (high and low) 
— Sleep 
— Deep sleep 
— Power down 


The MPC850 supports a wide range of power management features including full-high, 
full-low, doze, sleep, deep-sleep, and low-power stop. These modes progressively reduce 
power consumption, as follows: 


e In full-high mode, the MPC850 is fully powered with all internal units operating at 
the full processor speed. 


e Full-low mode is the same as full-high, but operates at a lower frequency. A gear 
mode determined by a clock divider allows the operating system to reduce the 
operational frequency of the processor. 


e Doze mode disables core functional units except the time base, decrementer, PLL, 
memory controller, real-time clock, and places the CPM in low-power standby 
mode. 


e Sleep mode is the next lower power mode. It disables everything except the real-time 
clock and periodic interrupt timer, leaving the PLL active for quick wake-up. 


e Deep-sleep mode disables the PLL for lower power, but slower wake-up. 


e Low-power stop disables all logic in the processor except the minimum logic 
required to restart the device, and provides the lowest power consumption but 
requires the longest wake-up time. 
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1.2.3.3 Memory Controller 


The memory controller is responsible for controlling a maximum of eight memory banks 
shared between a general-purpose chip-select machine (GPCM) and a pair of sophisticated 
user-programmable machines (UPMs). It supports a glueless interface to SRAM, EPROM, 
flash EPROM, regular DRAM devices, self-refresh DRAMsS, extended data output DRAM 
devices, synchronous DRAMs, and other peripherals. This flexible memory controller 
allows the implementation of memory systems with very specific timing requirements. 


The GPCM provides interfacing for simpler, lower-performance memory resources and 
memory-mapped devices. The GPCM has inherently lower performance because it does 
not support bursting. For this reason, GPCM-controlled banks are used primarily for 
boot-loading and access to nonburstable memory-mapped peripherals. 


The UPM provides both more features and, because it supports bursting, higher 
performance. Therefore it is typically used to interface with higher-performance run-time 
memory such as DRAM and bursting SRAM. 


The UPM supports address multiplexing of the external bus, periodic timers, and 
generation of programmable control signals for row address and column address strobes to 
allow for a glueless interface to DRAM devices. The periodic timers allow refresh cycles 
to be initiated while the address multiplexing provides row and column addresses. 


Different timing patterns can be generated for the control signals that govern a memory 
device. These patterns define how the external control signals behave in read-access, 
write-access, burst read-access, or burst write-access requests. Periodic timers are also 
available to periodically generate user-defined refresh cycles. 


The following is a list of the memory controller’s main features: 


e Eight memory banks 
— 32-bit address decode with mask 
— Variable block sizes (32 Kbytes to 4 Gbytes) 
— Byte parity generation/checking 
— Write-protection capability 
— Address types protection for memory bank accesses by internal masters 
— Control signal generation machine selection on a per-bank basis 
— Support for external master access to memory banks 
— Synchronous and asynchronous external masters support 
¢ General-purpose chip-select machine (GPCM) 
— Compatible with SRAM, EPROM, FEPROM, and peripherals 
— Global (boot) chip-select available at system reset 
— Boot chip-select support for 8-, 16-, and 32-bit devices 


— Minimum two clock accesses to external device 
— Four byte write enable signals (WE) 
— Output enable signal (OE) 
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e Two user-programmable machines (UPMs) ) 
— Programmable-array-based machine controls external signal timing with a. 
granularity of one quarter of an external bus clock period 
7 User-specified control-signal patterns run when an internal or external 
synchronous master requests a single-beat or burst read or write access. 
— User-specified control-signal patterns run when an external asynchronous master 
requests a single-beat read or write access. 
— UPM periodic timer runs a user-specified control signal pattern to support 
refresh 
— User-specified control-signal patterns can be initiated by software 
— Each UPM can be defined to support DRAM devices with depths of 64, 128, 256, 
and 512 Kbytes, and 1,2, 4, 8, 16, 32, 64, 128, and 256 Mbytes 
— Each UPM provides programmable ane for the following signals: 
— Four byte-select lines 
— Six external general-purpose lines 
o Supports 8-, 16-, and 32-bit DRAM port sizes. 
— Glueless interface to one bank of DRAM (only external buffers are neue for 
additional SIMM banks) 
— Page mode support for successive transfers within a burst for all on-chip and 
_ external synchronous devices 


-— Internal address multiplexing for all on-chip bus masters supporting 64-, 128-, 
256-, and 512-Kbyte, and 1-, 2-, 4-, 8-, 16-, 32-, 64-, 128-, 256-Mbyte page 
banks 


— Glueless interface to EDO, self refresh, and synchronous DRAM devices 


1.2.4 Communications Processor Module (CPM) 


The CPM provides a flexible and integrated approach to communications-intensive 
environments. To reduce system frequency and save power, the CPM has its own 
independent RISC communications processor (CP) that is optimized for serial 
communications. The CP services several integrated communications channels, performing 
low-level protocol processing and controlling DMA. 


The CPM supports multiple communications channels and protocols, and it has flexible 
firmware programmability. The CPM frees the core of many computational tasks in the 
following ways: 
e By reducing the interrupt rate. The core is interrupted only upon frame reception or 
transmission, instead of on a per-character basis. 


e By implementing some of the OSI layer-2 processing, which provides more core 
bandwidth for higher layer processing. 


e By supporting multibuffer memory data structures that are convenient for software 
handling. 
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The CPMs are similar in the MPC850 and MPC860; both are derived from the CPM in the 
MC68360 QUICC; see the MC68360 Quad Integrated Communications Controller 
(QUICC) User’s Manual. 


The following lists the CPM’s main features: 


e Communications processor (CP) 


— Dual-port RAM 
— Internal ROM 


— Two physical serial DMA (SDMA) controllers implement fourteen SDMA 
channels, which provide two channels each for the SCCs, SMCs, USB channel, 
SPI, and (°C. 


— Two independent DMA (IDMA) channels for memory-to-memory transfers or 
interfacing external peripherals. 


— RISC timer tables 
e Two full-duplex serial communications controllers (SCC2 and SCC3) that support 
the following: 
— UART protocol (asynchronous or synchronous) 
— HDLC protocol 
— AppleTalk protocol 
— Asynchronous HDLC protocol 
— BISYNC protocol 
— Transparent protocol 
— Infrared protocol (IrDA) 
— TEEE 802.3/Ethernet protocol 
e Two full-duplex serial management controllers (SMCs) 


— UART protocol 

— Transparent protocol | 

— GCI protocol for monitor and C/I channels (for ISDN) 
e A universal serial bus (USB) controller 


— Supports slave mode at a maximum of 12 Mbps with four USB endpoints 
e Serial peripheral interface (SPI) support for master or slave modes 
e Inter-integrated circuit (°C) bus controller 


e A serial interface (SI) with a time-slot assigner (TSA) that supports multiplexing of 
data from SCCs and SMCs onto one time-division multiplexed (TDMa) interface 


e Four independent baud rate generators (BRGs) 

e Four general-purpose 16-bit timers or two 32-bit timers 
e CPM interrupt controller (CPIC) 

e General-purpose I/O ports 
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1.2.5 System Debugging and Testing Support 


The MPC850 contains an advanced debug interface that provides superior debug 
capabilities without degrading operation speed. It supports six watchpoint pins that can be 
combined with eight internal comparators, four of which operate on the effective address 
on the address bus. The other four comparators are split—two comparators operate on the 
effective address on the data bus and two comparators operate on the data on the data bus. 
The MPC850 can compare using the =, , <, and > conditions to generate watchpoints. 
Each watchpoint can then generate a breakpoint that can be programmed to trigger on a 
programmable number of events. 


The MPC850 provides a dedicated user-accessible test access port (TAP) that is fully 
compatible with the JEEE 1149.1 Standard Test Access Port and Boundary Scan 
Architecture. Problems associated with testing high-density circuit boards have led to 
development of this standard under the sponsorship of the Test Technology Committee of 
IEEE and the Joint Test Action Group (JTAG). The MPC850 implementation supports 
circuit-board test strategies based on this standard. 


The TAP consists of five dedicated signals, a 16-state TAP controller, and two test data 
registers. A boundary scan register links all device signals into a single shift register. The 
test logic, implemented using static logic design, operates independently of the device 
system logic. The MPC850 TAP implementation provides the capability to: — 

e Perform boundary scan operations to check circuit-board electrical continuity. 


e Bypass the MPC850 for a given circuit-board test by effectively reducing the 
boundary scan register to a single cell. 


e Sample the MPC850 system signals during operation and transparently shift out the 
result in the boundary scan register. 


e Disable the output drive to signals during circuit-board testing. 


1.3 Differences between the MPC850 and MPC860 
Ways in which the MPC850 differs from the MPC860 are summarized as follows. 


e One USB (12-Mbyte slave) port added 

e Dual-port RAM increased to 8 Kbytes 

¢ Two SCCs instead of four 

¢ Smaller caches (2-Kbyte instruction cache and 1-Kbyte data cache) 
e Smaller MMUs (eight entries instead of 32) 

¢ Only one PCMCIA slot is supported 

e Only one TDM port is supported (TDMa) 


e PIP (Centronics™ port) is not supported 


e DSP library functions are removed 


EE EO EE EO EE OEE pracnonccgncoss casei 
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Memory Map 


Each memory resource in the MPC850 is mapped within a contiguous block of 16 Kbyte 
memory. The location of this block within the global 4-Gbyte physical memory space can 
be mapped on 64-Kbyte resolution through an implementation-specific special-purpose 
register (SPR) called the internal memory map register (MMR). See Section 10.4.1, 
“Internal Memory Map Register (MMR).” Table 2-1 defines the internal memory map. 


Table 2-1. MPC850 Internal Memory Map 


SIUMCR—SIU module configuration register 32 bits | 10.4.2/10-6 | 


SYPCR—System protection control register 10.4.3/10-8 
008-000 |Resened ies 


SWSR-— Software service register 10.7.1/10-22 


SIPEND—SIU interrupt pending register | 10.5.4.1/10-15 










































oz __[TESR—Trarstererorsiausreghier_—~| S0biw [TOAAMOS 
ooe-mar_[Resered «def 
esoved «dB 


0 a . 
SIMASK—SIU interrupt mask register 10.5.4.2/10-16 
SIEL—SIU interrupt edge/level register 32 bits | 10.5.4.3/10-17 | 







































PBRO—PCMCIA interface base register 0 16.4.5/16-12 
16.4.6/16-12 


080 7 i A5S/6- 
094 | 6/16- 
098 7 ASI6- 
09C i 6/6- 
AO ) | 


090 PBR2—PCMCIA interface base register 2 32 bits | 16.4.5/16-12 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


OB8 PBR7—PCMCIA interface base register 7 32 bits | 16.4.5/16-12 - 
OBC POR7—PCMCIA interface option register 7 16.4.6/16-12 


OE4 PGCRB—PCMCIA interface general control 32 bits | 16.4.4/16-11 
register B 

OE8 PSCR—PCMCIA interface status changed 32 bits | 16.4.2/16-9 
register 


Resoved «dA 
oF0-OFF 


BRO—Base register bank 0 15.4.1/15-8 
104 ORO— Option register bank 0 15.4.2/15-10 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


Comet [ome 


180—1FF Reserved 
bytes 


— 
Nh 
© 


















TBSCR—Timebase status and control register 16 bits | 10.9.3/10-25 


204 | TBREFA—Timebase reference register A 32 bits | 10.9.2/10-24 | 
208 TBREFB—Timebase reference register B | 32 bits 


2 
2 
2 
2 RTCSC— Real-time clock status and control 16 bits |10.10.1/10-27 
register 
2 
2 
2 


10.10.2/10-28 


RTSEC— Real-time alarm seconds | 32 bits | 10.10.4/10-29 


00 

04 

08 

20 
40 
Ad 
48 


PISCR—Periodic interrupt status and control 16 bits | 10.11.1/10-31 
register 


RTCAL— Real-time alarm register 32 bits | 10.10.3/10-28 
PITC—Periodic interrupt count register 32 bits | 10.11.2/10-32 
PITR—Periodic interrupt timer register 32 bits | 10.11.3/10-32 









lo 








and § 














SCCR—System clock control register a 32 bits 14.6.1/14-27 


2800 . —— | 
284 PLPRCR—PLL, low-power, and reset control 32 bits | 14.6.2/14-29 
register . 


RSR—Reset status register 32 bits | 11.2/11-5 


28C—2FF Reserved 116 
bytes 


Sere e q 
32 bits 

















TBSCRK—Timebase status and control register 10.4.5/1 0-10 
key 


TBREFAK— Timebase reference register A key 32 bits | 10.4.5/10-10 
TBREFBK—Timebase reference register B key 32 bits | 10.4.5/10-10 
TBK—Timebase/decrementer register key 32 bits | 10.4.5/10-10 


. 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


| RTCSCK —Real-time clock status and control 32 bits 
register key 


RTCK—Real-time clock register key 32 bits | 10.4.5/10-10 . 
RTSECK—Real-time alarm seconds key 32 bits | 10.4.5/10-10 


| Section/Page 
10.4.5/10-10 | 


RTCALK— Real-time alarm register key 32 bits | 10.4.5/10-10 


PISCRK—Periodic interrupt status and control 32 bits | 10.4.5/10-10 
register key 


PITCK—Periodic interrupt count register key 10.4.5/10-10 


380 SCCRK—System clock control key 10.4.5/10-10 
A 
8 


38 PLPRCRK—PLL, low power and reset control 32 bits | 10.4.5/10-10 
register key 
8 


RSRK—Reset status register key | 32 bits | 10.4.5/10-10 


Reserved . 1236 
a bytes . 


320 
324 
328 
32C 
340 
344 





3 
38C-85F 










































33.4.1/33-6 


860 I2MOD—I-C mode register 
64 I2ADD—I*C address register 33.4.2/33-7 
68 l2BRG—I*C BRG register | 8 bits | 33.4.3/33-7 
0 
4 


8 


Li 
o 


86C l2COM—I*C command register | 8 bits | 33.4.5/33-8 
7 


I2CER—I°C event register 33.4.4/33-8 


l2CMR—I*C mask register 33.4.4/33-8 


5—8FF Reserved 139 
. bytes 


SDAR—SDMA address register 32 bits 
SDSR—SDMA status register | 8 bits 


© 
ce) 
ye 


8 

87 
871 
8 


jee) 
Ei 





19.2.4/19-5 
19.2.2/19-4 


SDMR—SDMA mask register | Bbits | 19.2.3/19-5 


9 


IDSR1—IDMAY1 status register | 8 bits 19.3.9.2/19-20 | 


904 
08 
90C 
910 | 


2-4 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 
PRE-RELEASE OF REVISION 0 














_ Part |. Overview 





Table 2-1. MPC850 Internal Memory Map (Continued) 


Section/Page 


IDMR1—IDMA1 mask register 


Reserved 


8 bits | 19.3.9.3/19-20 
915-917 3 bytes | — 
918 IDSR2—IDMA2 status register 8 bits | 19.3.9.2/19-20 
919-91B Reserved 3 bytes | — 7 —— 
91C IDMR2—IDMA2 mask register 8 bits | 19.3.9.3/19-20 
91D-92F Reserved 19 bytes | — 





: co 
—k 
: + 


Communications Processor Module Interrupt Control 
16 bits | 35.5.5/35-10 
Reserved 114 bytes | — 


930 —_ CIVR—CPM interrupt vector register 
932-93F 


940 CICR-—CPM interrupt configuration register 35.5.1/35-7 

944 CIPR—CPM interrupt pending register 35.5.2/35-8 _ 
948 CIMR—CPM interrupt mask register ) 35.5.3/35-9 

94C CISR—CPM in-service register 32 bits | 35.5.4/35-9 


| os 4 x Input/Output Port 





50 | PADIR—Port A data direction register 16 bits |34.2.1.3/34-4 
52 PAPAR—Port A pin assignment register 16 bits | 34.2.1.4/34-5 
54 PAODR—Port A open drain register | 16 bits |34.2.1.1/34-3 
56 PADAT—Port A data register 16 bits | 34.2.1.2/34-3 
958-95F | Reserved 8 bytes f= 
PCDIR—Port C data direction register {6 bits |34.4.1.2/34-14 | | 
16 bits [34.4.1.3/34-15 
16 bits | 34.4.1.4/34-15 
16 bits |34.4.1.1/34-14 
16 bits |34.4.1.5/34-16 
6 bytes | — 
970 PDDIR—Port D data direction register 16 bits |34.5.1.2/34-18 
972 PDPAR—Port D pin assignment register 16 bits | 34.5.1.3/34-19 - 
974 Reserved er | 2 bytes | — 
976 PDDAT —Port D data register 
978-97F 


at 








cO| © 









c 


62 
964 | PCSO—Port C special options register 
PCDAT —Port C data register | 
968 PCINT—Port C interrupt control register | 
96A-96F | 


PCPAR—Port C pin assignment register 


Reserved 


16 bits | 34.5.1.1/34-1 
8 bytes | — 


Res 















aden 


16 bits |17.2.3.1/17-8 
14 bytes 
16 bits | 17.2.3.2/17-9 
16 bits | 17.2.3.2/17-9 


16 bits |17.2.3.3/17-10 | 
16 bits | 17.2.3.3/17-10 | 


TGCR—Timer global configuration register 


© 


80 


982-—98F Reserved 


TMR1—Timer 1 mode register 





92 
94 


TMR2—Timer 2 mode register 


co 


TRRi—Timer 1 reference register 


TRR2—Timer 2 reference register 





998 TCR1—Timer 1 capture register 16 bits | 17.2.3.4/17-10 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


TCR2—Timer 2 capture register 16 bits | 17.2.3.4/17-10 


99A 


99C TCN1—Timer 1 counter 16 bits | 17.2.3.5/17-10 
99E TCN2—Timer 2 counter 16 bits | 17.2.3.5/17-10 


9C7 RMDS—RISC microcode development support 8 bits | 18.6/18-5 
control register 


9CC RCTR1—RISC controller trap register 1 16 bits | Used only by optional RAM microcode 

9CE RCTR2—RISC controller trap register 2 Used only by optional RAM microcode 

RCTR3—RISC controller trap register 3 16 bits | Used only by optional RAM microcode 

9D2 RCTR4—RISC controller trap register 4 Used only by optional RAM microcode 
RTER—RISC timer event register 18.8.4/18-16 

9DA RTMR—RISC timers mask register 16 bits | 18.8.4/18-16 


co 
Ww 
is 
ice) 
jue) 
TN 





co 












9F4 BRGC2—BRG2 configuration register 20.4.1/20-36 
9F8 BRGC3—BRGs configuration register 32 bits | 20.4.1/20-36 
9FC BRGC4—BRG4 configuration register 20.4.1/20-36 


Oo} 

a 
I 

o 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


ae | Steareee 





















B 














eria 








USMOD—USB mode register 8 bits | 32.6.1/32-9 
USADR—USB slave address register 8 bits | 32.6.2/32-10 
USCOM—USB command register 32.6.4/32-12 


}A04 | USEPO—USB endpoint 0 register 16 bits |32.6.3/32-11 
AOS USEP1 —USB endpoint 1 register 16 bits 














AQO 

AO1 

A0d2 

A04 

A06 
A10 
A12 
A14 
A16 
A1i7 
A18—A1F 


USBER —USB event register 16 bits | 32.6.5/32-12 


AIG USBMR —USB mask register 16 bits | 32.6.5/32-12 


USBS —USB status register 8 bits | 32.6.6/32-13 


8 bytes 











GSMR_L2—SCC2 general mode register 32 bits | 21.2.1/21-4 
GSMR_H2—SCC2 generai mode register 32 bits | 21.2.1/21-4 


PSMR2—SCC2 protocol-specific mode register 16 bits | 21.2.2/21-10 
22.16/22-13 (UART) 
25.13.3/25-11 (Asynchronous HDLC) 


26.11/26-10 (BISYNC) 
27.17/27-15 (Ethernet) 
28.9/28-8 (Transparent) 











A20 
A24 
A28 
TODR2—SCC2 transmit on demand register 16 bits |21.2.4/21-11 
DSR2—SCC2 data synchronization register 16 bits | 21.2.3/21-10 : 
A30 SCCE2—SCC2 event register 16 bits | 22.20/22-21 (UART) 
23.11/23-12 (HDLC) 
25.13.1/25-9 (Asynchronous HDLC) 
28.13/28-13 (Transparent) 
A34 SCCM2—SCC2 mask register 16 bits | 22.20/22-21 (UART) 
25.13.3/25-11 (Asynchronous HDLC) 
26.15/26-16 (BISYNC) 
28.13/28-13 (Transparent) 
A37 SCCS2—SCC2 status register 8 bits | 22.20/22-21 (UART) | 
23.12/23-14 (HDLC) 
26.15/26-16 (BISYNC) 


26.15/26-16 (BISYNC) 
23.12/23-14 (HDLC) 
28.13/28-13 (Transparent) 
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Table 2-1. MPC850 Internal Memory Map (Continued) 
IRMODE—Infrared mode register 16 | 29.4.1/29-6 
IRSIP—Infrared serial interaction pulse register 16 29.4.2/29-7 
ee. Mean : a 7 Serial Communications Controller 3 (SCC3) (Where applicable) : ; Or, Bl, Neat Sal 
GSMR_L3—SCC3 general mode register 32 bits | 21.2.1/21-4 
GSMR_H3—SCC83 general mode register 32 bits | 21.2.1/21-4 
A48 PSMR3—SCC3 protocol specific mode register 16 bits |21.2.2/21-10 
22.16/22-13 (UART) 
25.13.3/25-11 (Asynchronous HDLC) 
26.11/26-10 (BISYNC) 
27.17/27-15 (Ethernet) 
28.9/28-8 (Transparent) 
TODR3—SCC3 transmit on demand register 16 bits |21.2.4/21-11 
DSR3—SCC3 data synchronization register 16 bits |21.2.3/21-10 
SCCE3—SCCS3 event register 16 bits |22.20/22-21 (UART) | 
_ 23.12/23-14 (HDLC) 
nears 2 bytes | 95, 13.3/25-11 (Asynchronous HDLC) 
SCCM3—SCC3 mask register 16 bits | 26.15/26-16 (BISYNC) 
28.13/28-13 (Transparent) 


SCCS3—SCC3 status register 


22.20/22-21 (UART) 
23.12/23-14 (HDLC) 


( 

( 
26.15/26-16 (BISYNC) 
28.13/28-13 (Transparent) 























As2 [SMCMR1—SMC1 mode register mode register a [16 bits | bits” 30.2.180-3 | 
ARE 
A8&6 SMCE1—SMC‘1 event register 8 bits | 30.3.12/30-19 (UART) 
30.4.11/30-30 (Transparent) 
: 30.5.9/30-37 (GCI) 
A8A SMCM1—SMC1 mask register 8 bits | 30.3.12/30-19 (UART) 
30.4.11/30-30 (Transparent) 
| 30.5.9/30-37 (GCI) 





Ag SMCMR2—SMC2 mode register 16 bits | 30.2.1/30-3 


SMCE2—SMC2 event register 8 bits |30.3.12/30-19 (UART) 
30.4.11/30-30 (Transparent) 
30.5.9/30-37 (GCI) 


A92 
AQ 
A96 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


SMCM2—SMC2 mask register 8 bits | 30.3.12/30-19 (UART) 
30.4.11/30-30 (Transparent) 
30.5.9/30-37 (GCI) 














eral Inte 
























SPMODE-—SPI mode register 31.4.1/31-7 





SPIE—SPI event register 31.4.2/31-10 
SPIM—SPI mask register 31.4.2/31-10 
SPCOM—SPI command register 31.4.3/31-10 











Po 


































i 


[AEO =| SIMODE—SI mode register a 20.2.4.2/20-15 
AEA | SIGMR-—SI global mode register 20.2.4.1/20-14 


PBDIR—Port B data direction register 












eevee BI 
SISTR—SI status register 20.2.4.5/20-22 
JAEZ SICMR—SI command register 20.2.4.4/20-22 





SICR—SI clock route register 20.2.4.3/20-20 
SIRP—Serial interface RAM pointer register 20.2.4.6/20-23 






AF4—BFF Reserved 268 
bytes 

COO-—DFF |SIRAM-—SI routing RAM 512 20.2.3.5/20-11 
bytes 

EOO—1FFF | Reserved 4,608 
bytes 


2000—2FFF | Dual-port system RAM 4,096 | 18.7.1/18-11 
bytes 

3000-—3BFF | Dual-port system RAM expansion 3,072 | 18.7.1/18-11 
bytes 
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Table 2-1. MPC850 Internal Memory Map (Continued) 


p Name | Size | Section/Page 
ied PRAM—Dual-port parameter RAM 1,024 | 18.7.3/18-12 
bytes 












2-10 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 
PRE-RELEASE OF REVISION 0 





Part Il 
PowerPC Microprocessor Module 





Intended Audience 


Part If is intended for users who need to understand the programming model of the 
embedded microprocessor. It assumes some familiarity with RISC architectures. 


Contents 


Part II describes the PowerPC microprocessor embedded in the MPC850. It provides 
detailed information on the registers and instructions that are implemented, the memory 
management unit (MMU), cache model, exception model, and an overview of instruction 
timing. 


It contains the following chapters: 


e Chapter 3, “The PowerPC Core,’ provides an overview of the MPC850 core, 
summarizing topics described in further detail in subsequent chapters in Part II. 


e Chapter 4, “PowerPC Core Register Set,’ describes the hardware registers 
accessible to the MPC850 core. These include both architecturally-defined and 
MPC850-specific registers. 


¢ Chapter 5, “MPC850 Instruction Set.’ describes the PowerPC instructions 
implemented on the MPC850, including MPC850-specific features. 


e Chapter 6, “Exceptions,’ describes the PowerPC exception model as it is 
implemented on the MPC850. 


¢ Chapter 7, “Instruction and Data Caches,” describes the organization of the on-chip 
instruction and data caches, cache control, various cache operations, and the 
interaction between the caches, the load/store unit (LSU), the instruction sequencer, 
and the system interface unit (SIU). | 


e Chapter 8, “Memory Management Unit” describes how the PowerPC MMU model 
is implemented on the MPC850. Although the MPC850 MMU is based on the 
PowerPC MMU model, it differs greatly in many respects, which are described in 
this chapter. 
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e Chapter 9, “Instruction Execution Timing,’ describes the MPC850 instruction unit, 
and provides ways to make greatest advantage of its RISC architecture 
characteristics, such as pipelining and parallel execution. It includes a table of 
instruction latencies and lists dependencies and potential bottlenecks. 


Suggested Reading 


This section lists additional reading that provides background for the information in this 
manual as well as general information about the PowerPC architecture. 


MPC8xx Documentation 


Supporting documentation for the MPC850 can be accessed through the world-wide web 
at http://www.motorola.com/SPS/RISC/netcomm. This documentation includes technical 
specifications, reference materials, and detailed applications notes. 


PowerPC Documentation 
The PowerPC documentation is organized in the following types of documents: 


e Programming environments manuals— These books provide information about 
resources defined by the PowerPC architecture that are common to PowerPC 
processors. There are two versions, one that describes the functionality of the 
combined 32- and 64-bit architecture models and one that describes only the 32-bit 
model. | | 


— PowerPC Microprocessor Family: The Programming Environments, Rev 1 
(Motorola order #: MPCFPE/AD) 


— PowerPC Microprocessor Family: The Programming Environments for 32-Bit 
Microprocessors, Rev. | (Motorola order #: MPCFPE32B/AD) 


¢ PowerPC Microprocessor Family: The Bus Interface for 32-Bit Microprocessors 
(Motorola order #: MPCBUSIF/AD) provides a detailed functional description of 
the 60x bus interface, as implemented on the PowerPC 601™ , 603, and 604 family 
of PowerPC microprocessors. This document is intended to help system and chip set 
developers by providing a centralized reference source to identify the bus interface 
presented by the 60x family of PowerPC microprocessors. 


¢ PowerPC Microprocessor Family: The Programmer’s Reference Guide 
(Motorola order #: MPCPRG/D) is a concise reference that includes the register 
summary, memory control model, exception vectors, and the PowerPC instruction 
Set. 


¢ PowerPC Microprocessor Family: The Programmer’s Pocket Reference Guide 
(Motorola order #: MPCPRGREF/D). This feedlot card provides an overview of the 
PowerPC registers, instructions, and exceptions for 32-bit implementations. 


¢ Application notes—These short documents contain useful information about 
specific design issues useful to programmers and engineers working with PowerPC 
processors. 
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For a current list of useful Motorola documentation, refer to the world-wide web at http:// 
www.motorola.com/SPS/RISC/netcomm and at http://www.mot.com/SPS/PowerPC/. 


Conventions 

This chapter uses the following notational conventions: 

Bold entries in figures and tables showing registers and parameter 
RAM should be initialized by the user. 

mnemonics Instruction mnemonics are shown in lowercase bold. 

italics Italics indicate variable command parameters, for example, bectrx. 
Book titles in text are set in italics. 

Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

rA,rB Instruction syntax used to identify a source GPR 

rD Instruction syntax used to identify a destination GPR 

REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
mode enable bit in the machine state register. 


In certain contexts, such as in a signal encoding or a bit field, 
indicates a don’t care. | 

n Indicates an undefined numerical value 

a NOT logical operator 
AND logical operator 

| OR logical operator 


Acronyms and Abbreviations 


Table i contains acronyms and abbreviations that are used in this document. Note that the 
meanings for some acronyms (such as SDR1 and DSISR) are historical, and the words for 
which an acronym stands may not be intuitively obvious. 


Table v. Acronyms and Abbreviated Terms 


eee 
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Table v. Acronyms and Abbreviated Terms (Continued) 


Term Meaning 


oO 


R Condition register 


CRC Cyclic redundancy check 


TR Count register 


DABR Data address breakpoint register 


ue 


DAR Data address register 
DEC Decrementer register 


DMA 


= 


Direct memory access 
DRAM Dynamic random access memory 
DSISR 


DTLB 


Register used for determining the source of a DSI exception 


Data translation lookaside buffer 


m 


Effective address 


FPR Floating-point register 


| FPSCR Floating-point status and control register 


GPR General-purpose register 


Institute of Electrical and Electronics Engineers 


ITLB Instruction translation lookaside buffer 
Integer unit 


LIFO Last-in-first-out 


- 
=e) 


Link register 


LRU Least recently used 


LSB Least-significant byte 


Least-significant bit 

LSU Load/store unit 

MMU Memory management unit 
MSB Most-significant byte 
Most-significant bit 
Machine state register 
Not a number 


No operation 


EA Operating environment architecture 


PCI Peripheral component interconnect 


PVR Processor version register 
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Table v. Acronyms and Abbreviated Terms (Continued) 


Reduced instruction set computing 
Real-time operating system 
Read with intent to modify 





















Signed immediate value 





Receive 


[Seecsinunsseresee 
VEA >nvi 
XER 


|VEA Virtual environment architecture 


Register used primarily for indicating conditions such as carries and overflows for integer | 
operations 


PowerPC Architecture Terminology Conventions 


Table ii lists certain terms used in this manual that differ from the architecture terminology 
conventions. 


Table vi. Terminology Conventions 


The Architecture Specification This Manual 













Data storage interrupt (DSI) 
Instruction storage interrupt (ISI) ISI exception 
Privileged mode (or privileged state) 










Problem mode (or problem state) User-level privilege 
Real address Physical address 
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Table vi. Terminology Conventions (Continued) 


The Architecture Specification | 


Table iii describes instruction field notation conventions used in this manual. 













Table vii. Instruction Field Conventions 


The Architecture Specification Equivalent to: 
BA, BB, BT crbA, crbB, crbD (respectively) 
BF, BFA crfD, crfS (respectively) 


a 
a 


0...0 (shaded) 
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Chapter 3 
The PowerPC Core 


The core implements all PowerPC user-level instructions defined for 32-bit 
implementations except floating-point instructions (load/store and arithmetic). Likewise, it 
supports the registers defined by the PowerPC architecture necessary for the supported 
instructions. 


The MPC850 core adheres to portions of the PowerPC architecture definition for supervisor 
operations. For example, it implements the PowerPC exception model (excluding 
inappropriate exceptions, such as those that support floating-point operations). The 
architecture-defined memory management model has been modified to suit the specific 
needs of the MPC850 core. Additional exceptions are defined (as permitted by the 
architecture) to support address translation. 


The PowerPC architecture defines features not supported on the MPC850 hardware. These 
features include support for 64-bit addressing, multiprocessing, floating-point arithmetic, 
and some memory management features. 


The core also implements MPC850-specific development support features such as 
breakpoint and watchpoint mechanisms, program-flow tracking data generation, and debug 
mode operation. 


This chapter describes the functional specifications of the core. It is based on the PowerPC 
Microprocessor Family: The Programming Environments for 32-Bit Microprocessors, 
which provides a more in-depth discussion of issues related to the 32-bit portion of the 
PowerPC architecture. 


The subset of PowerPC instructions supported by the MPC850 are listed in Chapter 5, 
“MPC850 Instruction Set.” 


3.1 PowerPC Architecture Overview 


The PowerPC architecture, developed jointly by Motorola, IBM, and Apple Computer, is 
based on the POWER architecture implemented by RS/6000™ family of computers. The 
PowerPC architecture takes advantage of recent technological advances in such areas as 
process technology, compiler design, and reduced instruction set computing (RISC) 
microprocessor design to provide software compatibility across a diverse family of 
implementations, primarily single-chip microprocessors, intended for a wide range of 
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systems, including battery-powered personal computers; embedded controllers; high-end 
scientific and graphics workstations; and multiprocessing, microprocessor-based 
mainframes. 


To provide a single architecture for such a broad assortment of processor environments, the 
PowerPC architecture is both flexible and scalable. 


The flexibility of the PowerPC architecture offers many price/performance options. 
Designers can choose whether to implement architecturally-defined features in hardware or 
in software. For example, a processor designed for a high-end workstation has greater need 
for the performance gained from implementing floating-point normalization and 
denormalization in hardware than a device using a PowerPC embedded controller might. 


The PowerPC architecture defines the following features: 


e Separate 32-entry register files for integer instructions. The general-purpose 
registers (GPRs) hold source data for integer arithmetic instructions. 


¢ Instructions for loading and storing data between the memory system and the GPRs 


¢ Uniform-length instructions to allow simplified instruction pipelining and parallel 
processing instruction dispatch mechanisms 


e Nondestructive use of registers for arithmetic instructions in which the second, third, 
and sometimes the fourth operand, typically specify source registers for calculations 
whose results are typically stored in the target register specified by the first operand. 


e A precise exception model 


¢ A flexible architecture definition that allows certain features to be performed in 
either hardware or with assistance from implementation-specific software 
depending on the needs of the processor design 


¢ User-level instructions for explicitly storing, flushing, and invalidating data in the 
on-chip caches. The architecture also defines special instructions (cache block touch 
instructions) for speculatively loading data before it is needed, reducing the effect of 
memory latency. 


e A memory model that allows weakly-ordered memory accesses. This allows bus 
operations to be reordered dynamically, which improves overall performance and in 
particular reduces the effect of memory latency on instruction throughput. 


e Support for separate instruction and data caches (Harvard architecture) and for 
unified caches 


¢ Support for both big- and little-endian addressing modes 


¢ Support for 64-bit addressing. The architecture supports both 32-bit or 64-bit 
implementations. This document describes the 32-bit portion of the PowerPC 
architecture. For information about the 64-bit architecture, see PowerPC 
Microprocessor Family: The Programming Environments. 
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3.1.1 Levels of the PowerPC Architecture 


The PowerPC architecture is defined in three levels that correspond to three programming 
environments, roughly described from the most general, user-level instruction set 
environment, to the more specific, operating environment. 


This layering of the architecture provides flexibility, allowing degrees of software 
compatibility across a wide range of implementations. For example, an implementation 
such as an embedded controller may support the user instruction set, whereas it may be 
impractical for it to adhere to the memory management, exception, and cache models. 


The three levels of the PowerPC architecture are defined as follows: 


¢ PowerPC user instruction set architecture (UISA)— The UISA defines the level of 
the architecture to which user-level (referred to as problem state in the architecture 
specification) software should conform. The UJSA defines the base user-level 
instruction set, user-level registers, data types, the exception model as seen by user 
programs, and the memory and programming models. 


e PowerPC virtual environment architecture (VEA)— The VEA defines additional 
user-level functionality that falls outside typical user-level software requirements. 
The VEA describes the memory model for an environment in which multiple 
devices can access memory, defines aspects of the cache model, defines cache 
control instructions, and defines the time base facility from a user-level perspective. 


Implementations that conform to the PowerPC VEA also adhere to the UISA, but 
may not necessarily adhere to the OFA. 


e PowerPC operating environment architecture (OEA)—The OFA defines 
supervisor-level (referred to as privileged state in the architecture specification) 
resources typically required by an operating system. The OEA defines the PowerPC 
memory management model, supervisor-level registers, synchronization 
requirements, and the exception model. The OEA also defines the time base feature 
from a supervisor-level perspective. 


Implementations that conform to the PowerPC OEA also conform to the PowerPC 
UISA and VEA. 


The MPC850 adheres to the OEA definition of the exception model and provides a 
subset of the memory management model. It includes OEA-defined registers and 
instructions for configuration and exception handling. 


Implementations that adhere to the VEA level are guaranteed to adhere to the UISA level; 
likewise, implementations that conform to the OEA level are also guaranteed to conform to 
the UISA and the VEA levels. For a more detailed discussion of the characteristics of the 
PowerPC architecture, see the Programming Environments Manual. 


For details regarding the MPC850 as a PowerPC implementation, see Section 3.6, “The 
MPC850 and the PowerPC Architecture.” 
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3.2 Features 
Figure 3-1 shows the basic features of the MPC850. 
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Figure 3-1. Block Diagram of the Core 
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The following is a list of the core’s main features: 





e 32-bit PowerPC architecture features 
— User-level instruction set (not including floating-point instructions) 
— Thirty-two, 32-bit general-purpose registers (GPRs) 


— Registers required to support PowerPC user-level instruction set (except 
floating-point instructions). These include the integer exception register (KER), 
condition register (CR), link register (LR), and counter register (CTR). 


— Time base upper and time base lower and registers (TBU and TBL) 


— A subset of the supervisor-level registers for compliance with the following 
PowerPC models: 


— Configuration— Machine state register (MSR) 


— Exception model—Save/restore registers 0 and 1 (SRRO and SRR1), DSI 
status register (DSISR), data address register (DAR) 


— Core-specific registers compliant with PowerPC architecture 
— Static branch prediction 


— Precise exception model that includes the subset of the PowerPC exceptions that 
supports the instruction set and memory management. The MPC850 implements 
all PowerPC asynchronous exceptions (interrupts) — system reset, machine 
check, decrementer, and external interrupts. MPC850-specific exceptions are 
PowerPC-compliant. 


— Separate 8-entry instruction and data translation lookaside buffers (TLBs) 
¢ Core-specific features 

— Fully static design 

— Additional registers that support the MPC850-specific features 

— The ability to optimally issue and retire one instruction per clock cycle 

— QOut-of-order execution and in-order completion 

— Extensive debug/testing support 


3.3 Basic Structure of the Core 
The MPC850 core consists of the following subunits: 
e Instruction unit (sequencer)— Consists of the branch processing unit (BPU), the 
instruction queue, and the exception handling mechanism. 
e Execution units—These consist of the following: 


— Integer unit—Implements all integer arithmetic and logical instructions defined 
by the PowerPC architecture: 


— Load/store unit (LSU)—Implements all load and store instructions except 
floating-point load/store instructions. Note that because the MPC850 does not 
implement floating-point load and store instructions, this document refers to 
integer load/store instructions simply as load/store instructions. 
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3.3.1 Instruction Flow 


As many as one instruction per clock cycle is fetched into the four-entry instruction queue 
(IQ). The branch processing unit (BPU) predicts the outcome of branch instructions and in 
some cases, resolves whether the branch is taken. Figure 3-2 shows general instruction 
flow. 









Fetch (maximum one instruction per clock cycle) 





Instruction Queue 





Dispatch (maximum one instruction per clock cycle) 





Completion Queue 


Retire (maximum one instruction per clock cycle) 
Figure 3-2. Instruction Flow Conceptual Diagram 


Nonbranch instructions reaching IQO are dispatched to the execution units at an optimal 
rate of one instruction per clock cycle. An instruction cannot be dispatched unless it can 
also take a position in the six-entry completion queue (CQ). 


All branch instructions, including unconditional branch instructions, reaching IQO must 
also take a position in the completion queue. This allows program order to be maintained, 
it ensures a precise execution model, and it allows branch instructions to be used as 
breakpoints. 


All instructions enter the CQ along with processor state information that can be affected by 
the instruction’s execution. Executed arithmetic instructions pass their results both to 
rename buffers and to the architected registers (typically GPRs), but to ensure program 
order, instructions remain in the CQ until they can be retired. 


If an exception occurs before the instruction can be retired, any results are removed from 
the rename buffer and GPR and the instruction is flushed from the completion queue, along 
with subsequent instructions that have not executed or have not dispatched. 


This information is used to enable out-of-order completion of instructions and ensure a 
precise exception model. An instruction can be retired after all instructions ahead of it have 
retired and it updates the architected destination registers without taking an exception. 
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3.3.2 Basic Instruction Pipeline 


Figure 3-3 shows instruction pipeline timing, showing how by distributing the processes 
required to fetch, execute, and retire an instruction into stages, multiple instructions can be 
processed during a single clock cycle. 


Gclk1 | =a | | | | | | | 
Fetch (__,lwz_X_sub_ X_addic_ X__mulli_ X_adi_ op) sis 




















DON sate a 2 OO 
Read+Execute (tw) ( Bubble} (addic ) _ 
Write A Sy fai} 
L Address Drive ee 
[a ee 


Figure 3-3. Basic Instruction Pipeline Timing 


3.3.3 Instruction Unit 


The instruction unit implements the basic instruction pipeline, fetches instructions from the 
memory system, dispatches them to available execution units, and maintains a state history 
to ensure a precise exception model and that operations finish in order. The instruction unit 
implements all branch processor instructions, including flow control and CR instructions. 
Table 9-1 describes instruction latencies. 


3.3.3.1 Branch Operations 

Because branch instructions can change program flow and because most branches cannot 
be resolved at the same time they are fetched, program branching can keep a processor from 
operating at maximum instruction throughput. 


If a branch is mispredicted, additional time is required to flush the incorrect branch 
instructions and begin fetching from the correct target stream, which can create bubbles in 
the pipeline. To reduce the latency caused by misprediction, PowerPC branch instructions 
allow the programmer to indicate whether a branch is likely to be taken. This is called static 
branch prediction. 
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Figure 3-4. Sequencer Data Path 


The instruction unit executes branches in parallel with those instructions that must be 
dispatched to an execution unit. Ideally, a instruction is dispatched to an execution unit 
every clock cycle, even when branches are in the code. The IQ also eliminates stalls due to 
instruction fetches that miss in the instruction cache or that generate a page fault. All 
instructions are fetched into the IQ, and all instructions except branch instructions are 
dispatched to the execution units when they reach IQO0. Branches enter the queue to mark 
watchpoints. See Chapter 36, “System Development and Debugging.” Because branches do 
not prevent the issue of nonbranch instructions unless they come in pairs, the performance 
impact of entering branches in the IQ is negligible. | 


The core also implements a branch reservation station and static branch prediction so 
branches can be resolved as early as possible. The reservation station allows a branch 
instruction to pass from the IQ before its condition is ready. With the branch out of the way, 
fetching can continue as the branch is evaluated. Static branch prediction (defined by the 
PowerPC UISA) determines which instruction stream is prefetched while the branch is 
being resolved. When the branch operand becomes available, it is forwarded to the BPU 
and the condition is evaluated. The static branch prediction mechanism is shown in 
Table 3-1. 
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Table 3-1. Static Branch Prediction 


Branch Type Default Prediction (y=0) Modified Prediction (y=1) 
BC with negative offset Fall through 
BC with positive offset Fall through 


BCLR or BCCTR (LR or CTR) address ready Fall through 


B (unconditional branch) 





Branch instructions whose condition is unavailable are issued to the reservation station 
until they are predicted. Branch instructions that issue with source data already available do 
not require prediction (and are said to be resolved). Instructions fetched under a predicted 
branch are conditionally fetched. The core flushes instructions conditionally fetched under 
a mispredicted branch. 


3.3.3.2 Dispatching Instructions 

The sequencer can dispatch a sequential instruction on each clock if the appropriate 
execution unit 1s available and a position is free in the completion queue. The execution unit 
must be able to discern whether source data is available and to ensure that no other 
executing instruction targets the same destination register. The sequencer informs the 
execution units of the existence of the instruction on the instruction bus. The execution units 
decode the instruction, check whether the source and destination operands are free, and 
inform the sequencer whether instructions can be dispatched. 


3.4 Register Set 


Registers implemented in the MPC850 core can be grouped as follows: 


e PowerPC registers. The MPC850 implements the user registers defined by the UISA 
and VEA portions of the architecture except for those that support floating-point 
operations. PowerPC registers implemented on the MPC850 are described in 
Section 4.1.1, “PowerPC Registers — User Registers,’ and Section 4.1.2, “PowerPC 
Registers — Supervisor Registers.” 


e Implementation-specific registers. These are all special-purpose registers (SPRs). 
These are described in Section 4.1.3, “MPC850-Specific SPRs.” 


3.5 Execution Units 


As shown in Figure 3-1, the MPC850 allows parallel execution of instructions using 
separate branch processing unit (BPU), load/store unit (LSU), and integer unit ({U). These 
execution units are described in the following sections. 
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3.5.1 Branch Processing Unit 


The branch processing unit differs from the other execution units in that it examines branch 
instructions while they are in the IQ. Other instructions are dispatched to the IU and LSU 
from IQO. For details about the performance of various instructions, see Table 3-1. 


The core supports the UISA-defined static branch prediction. That is, the y bit is used to 
provide a hint as to whether the branch the branch is likely to be taken or not taken. No 
prediction is done for branches to the link register or count register if the target address is 
not ready (see Table 3-1 for details). 


3.5.2 Integer Unit 
The core implements the following types of integer instructions: 
e Arithmetic instructions 
e Compare instructions 
e Trap instructions 
e Logical instructions 
e Rotate and shift instructions 
Most integer instructions can execute in one clock cycle. For details about the performance 
of the various instructions, see Table 3-1 of this manual. 
Note the following special cases: 


e [fan mtspr or mfspr instruction specifies an invalid SPR in which spr[0] = 1, a 
program exception occurs if the processor is in user mode. Valid SPRs are listed in 
Chapter 4, “PowerPC Core Register Set.” 


e If divw[o][.] is used to perform either (0x80000000 + -1) or (<anything> + 0), the 
contents of rD are 0x8000_0000 and if Rc = 1, the contents of the bits in the CR field 
0 are LT = 1, GT = 0, EQ = 0, and SO is set to the correct value. 


¢ In the cmpi, cmp, cmpli, and cmpl instructions, the L bit is applicable for 64-bit 
implementations. For the MPC850, if L = 1 the instruction form is invalid. The core 
ignores this bit and, therefore, the behavior when L = 1 is identical to the valid form 
instruction with L = 0. 


3.5.3 Load/Store Unit 


The load/store unit (LSU) transfers all data between the GPRs and the processor’s internal 
bus. It is implemented as an independent execution unit so that stalls in the memory 
pipeline affect the master instruction pipeline only if there is a data dependency. 


The following lists the LSU’s main features: 


e All instructions implemented in hardware, including unaligned, string, and multiple 
accesses 


¢ Two-entry load/store instruction address queue 
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e Pipelined operation. The LSU pipelines load accesses. Individual cache accesses of 
all multiple-register instructions and unaligned accesses are pipelined into the data 
cache interface. 





e Load/store multiple and string instructions synchronize 

e Load/store breakpoint/watchpoint detection support 

e The LSU implements cache and TLB management instructions as special bus write 
cycles, which are issued to the data cache interface. 


Figure 3-5 is a block diagram of the LSU and its two queues. The address queue is a 2-entry 
queue shared by all load/store instructions and the integer data queue is a 2-entry, 32-bit 
queue that holds integer data. 


The LSU has a dedicated writeback bus so that loaded data received from the internal bus 
is written directly back to the GPRs. 


Integer 


integer integer 
nodes Load Data Store Data 


32-Bit 


LOAD/STORE 
UNIT 





Integer 


Address 32-Bit Data Queue 


Queue 
and 
Increment 





D-Cache/D-MMU 
Interface 





Figure 3-5. LSU Functional Block Diagram 


To execute multiple/string instructions and unaligned accesses, the LSU increments the EA 
to access all necessary data. This allows the LSU to execute unaligned accesses without 
stalling the master instruction pipeline. 
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3.5.3.1 Executing Load/Store Instructions 


When load or store instructions are dispatched, the LSU determines if all of the operands 
are available. These operands include the following: 


e Address register operands 

e Source data register operands (for store instructions) 

e Destination data registers (for load instructions) 

e Destination address GPRs (for load/store with update instructions) 
If all operands are available, the LSU takes the instruction and enables the sequencer to 
issue a new instruction. Then, using a dedicated interface, the LSU notifies the integer unit 
of the need to calculate the EA. All load/store instructions are executed and finished in 
order. If no prior instructions are in the address queue, the load/store operation is issued to 
the data cache when the instruction executes. Otherwise, if prior instructions remain whose 
addresses have not been issued to the data cache, the instruction’s address and data are 
placed in their respective queues. For load/store with update instructions, the destination 


address register is written back on the following clock cycle, regardless of the address 
queue’s state. 


3.5.3.2 Serializing Load/Store Instructions 


The following load/store instructions are not executed until all previous instructions have 
finished. 


e Load/store multiple instructions —Imw, stmw 
e Memory synchronization instructions —Iwarx, stwex., sync 


e String instructions—Iswi, lswx, stswi, stswx 
¢ Move to SPRs 


The following load/store instructions must finish before more instructions can be issued. 


e Load/store multiple instructions —Imw, stmw 
e Memory synchronization instructions—Iwarx, stwex., sync 


e String instructions —Iswi, Iswx, stswi, stswx 


3.5.3.3 Store Accesses | 

Because the core supports the precise exception model, a new store instruction cannot 
update the data cache until all prior instructions have finished without an exception. If a 
store instruction follows a load instruction, a one-clock delay is inserted between the load 
bus cycle termination and the store cycle issue. 


3.5.3.4 Nonspeculative Load Instructions 

Load instructions targeted at nonspeculative memory are identified as nonspeculative one 
clock cycle after the previous load/store bus cycle ends, only if all prior instructions have 
finished without an exception. 
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The nonspeculative identification relates to the state of the cycle’s associated instruction. 
For Imw, although the accesses are pipelined into the bus, they are all marked as 
nonspeculative because the instruction is nonspeculative. If a single-register load 
instruction generates more than one bus cycle, some of the cycles can be marked as 
speculative and later cycles can be marked as nonspeculative after all prior instructions end. 
Speculative load accesses to external memory marked nonspeculative cannot occur until the 
load instruction becomes nonspeculative. 





3.5.3.5 Unaligned Accesses 


Although the 32-bit U-bus supports only naturally aligned transfers, the LSU supports 
unaligned accesses in hardware by breaking them into a pipelined series of aligned 
transfers. Table 3-2 shows the number of bus cycles needed for single-register load/store 
accesses. | 





















0x01/byte 






Table 3-2. Bus Cycles Needed for Single-Register Load/Store Accesses 
Transfer Address (Last Two Bits) | Number of Bus Cycles | Transfer Type | Address/Size 
0x01 2 Unaligned 0x01/byte 
0x02/byte 
0x03 2 Unaligned 0x03/byte 
0x04/byte 
0x01 3 Unaligned 
| 0x02/halfword 
0x05/byte 
0x02 2 Unaligned 0x02/halfword 
0x04/halfword 


0x03 0x03/byte 


0x04/halfword 
0x06/byte 


3.5.3.6 Atomic Update Primitives 


The lwarx and stwex. instructions are atomic update primitives and are used to set and clear 
memory reservations. Reservation accesses made by the same processor are implemented 
by the LSU. The external bus interface implements memory reservations as they relate to 
accesses made by external bus devices. Accesses made by other internal devices to internal 
memories implement memory reservations as they relate to special internal bus snoop logic. 


RRS ETL IT TS LTO SSL PROTEINS EL LEE EEE EEE LEGER LEE ROPER RIO CEEES 











BOBBED ROSE OSSD LEER ORO ORIOLE EEG LLL PEEE PLR IDLE DORE EDIE OOOO DIL SOLERO ROO OCOD IIOFE 
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When an Iwarx instruction executes, the LSU issues a cycle to the data cache with a special 
attribute. For external memory accesses, this attribute causes the external bus interface to 
set a memory reservation during the address tenure. External logic must then snoop the 
external bus to determine if another device breaks the memory reservation by accessing the 
same location. KR and CR signals are available to external logic to signal loss of a 
reservation to the external bus interface. When an stwex. instruction addresses external 
memory and the external bus interface determines that the reservation was lost, it blocks the 
external bus access and notifies the LSU. 


The MPC850 supports the memory reservation mechanism in a hierarchical bus structure. 
For reservations on internal memory, an Iwarx causes on-chip snoop logic to latch the 
address. This logic notifies the LSU of any internal master store access and resets the 
reservation. If a new Iwarx instruction address tenure executes successfully, it replaces any 
previous reservation address at the appropriate snoop logic. However, executing an stwex. 
instruction cancels the reservation unless an alignment exception is detected. 


3.6 The MPC850 and the PowerPC Architecture 


This section describes the relationship between the MPC850 and the PowerPC architecture. 
It indicates the types of distinguishing features of the MPC850 described in the following: 


e In many cases, the PowerPC architecture specification is flexible enough to allow 
implementation options. For example, the architecture does not specify whether 
unaligned transfers must be handled in hardware or whether instruction execution 
must be performed in hardware or software. 


e The PowerPC architecture defines optional features, some of which are 
implemented on the MPC850 (such as TLBs) and some of which are not, such as the 
eclwx and ecowx instructions. 


e The PowerPC architecture defines features, such as virtual memory and 
floating-point instructions, that are not implemented on the MPC850. 
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Table 3-3 summarizes MPC850 features with respect to the UISA definition. 
Table 3-3. UISA-Level Features 


Reserved fields | Reserved fields in instructions are described under the specific instruction definition in Chapter 5, 
“MPC850 Instruction Set.” Unless otherwise stated, instruction fields marked |, Il, and III are 
discarded during decoding. Thus, this type of instruction yields results of the defined instructions 
with the appropriate field = 0. In most cases, reserved fields in registers are ignored on write and 
return zeros for them on read for any control register implemented by the core. Exceptions are 

| XER[16—23] and the reserved bits of MSR, which are set by the source value on write and return 
the value last set for it on read. 






















Classes of 
Instructions 


Fetching 
instructions 


Required instructions (except floating-point load, store, and compute instructions) are 
implemented in hardware. Optional instructions are executed by implementation-dependent code; 
any attempt to execute one of these commands causes the core to take the software emulation 
exception (offset 0x01000). Illegal and reserved instruction class instructions are supported by 
implementation-dependent code and, thus the core hardware generates a software emulation 

| exception. 


Invocation of the system software for any exception caused by an instruction in the core is precise, 
regardless of the type and setting. 


The core fetches a number of instructions into its |Q from which they are dispatched to the 
execution units. If a program modifies instructions, it should call a system library program to 
ensure that the instruction fetching mechanism can detect changes before execution. 


Branch The core implements all UISA instructions defined for the branch processor in hardware. For 
instructions details about the performance of various instructions, see Table 3-1. 


Invalid branch Bits marked with z in the BO encoding definition default to z = 0 and are discarded by the core 
instruction forms | decoding. Thus, these instructions yield results of defined instructions for which z = 0. If the 
decrement and test CTR option is specified for the bectr or bcectri instructions, the target address 
of the branch is the new value of the CTR. Condition is evaluated correctly, including the value of 
the counter after decrement. 




































Branch prediction | The core uses the y bit to predict path for prefetch. Prediction is only done for not-ready branch 
conditions. No prediction is done for branches to the link or count register if the target address is 
not ready (see Table 3-1). 






Integer processor | The core implements the following integer instructions: 
- Arithmetic instructions 

* Compare instructions 

* Trap instructions 

* Logical instructions 

* Rotate and shift instructions 











Move to/from 
SPR instructions 


Move to/from invalid SPRs in which SPR[O] = 1 invokes the privileged instruction error exception 
handler if the processor is in user mode. 













Integer arithmetic | Attempting to use divw to perform either Ox80000000 ~+ -1 or <anything> + 0 sets the contents of 
instructions rD to 0x80000000 and if Rc =1, the contents CRO are LT = 1, GT =0, and EQ =0. SO is set to the 
correct value. 

In the cmpi, cmp, cmpli, and cmpIl instructions, the L bit is applicable for 64-bit implementations. 
For the MPC850, if L = 1 the instruction form is invalid. The core ignores this bit and, therefore, the 
behavior when L = 1 is identical to the valid form instruction with L = 0. 










Integer 
load/store with 
update 

instructions 


For load with update and store with update instructions where rA = 0, the EA is written into rO. For 
load with update instructions where rA = rD, rA is boundedly undefined. 
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Table 3-3. UISA-Level Features (Continued) 


Integer load/ For these types of instructions, EA must be a multiple of four. If it is not, the system alignment 
store multiple error handler is invoked. For an Imw instruction (if rA is in the range of registers to be loaded), the 
instructions instruction completes normally. rA is then loaded from the memory location as follows: 
rA <- MEM(EA+(rA-rD)*4, 4) 

























Integer load string | Load string instructions behave like load multiple instructions with respect to invalid format in 
instructions which rA is in the range of registers to be loaded. If rA is in the range, it is updated from memory. 





Memory 
synchronization 
instructions 


Optional No optional instructions are supported. 
instructions 


Little-endian byte } The LSU supports little-endian byte ordering as specified in the UISA. In little-endian mode, trying 
ordering to execute an unaligned individual scalar or multiple/string access causes an alignment exception. 


For these instructions, if EA is not a multiple of four, the system alignment error handler is invoked. 
















Table 3-4 summarizes MPC850 features with respect to the VEA definition. 
_ Table 3-4. VEA-Level Features 


Memory Memory coherency is not supported in the MPC850 hardware, but can be performed in the software 
coherency or by defining memory as cache inhibited. In addition, the MPC850 does not provide any data storage 
attributes to an external system. 


























Both the lwarx and stwex. instructions are implemented according to the PowerPC architecture 
requirements. When memory accessed by the Ilwarx and stwex. instructions is in the cache-allowed 
mode, it is assumed that the system works with the single master in this memory region. Therefore, if 
a data cache miss occurs, the access on the internal and external buses does not have a reservation 
attribute. The MPC850 does not cause the system DSI exception handler to be invoked if memory 

accessed by the Iwarx and stwex. instructions is in write-through required mode. Also, the MPC850 
does not support snooping an external bus activity outside the chip. The provision is made to cancel 
the reservation inside the MPC850 by using the CR and KR input signals. For accesses to internal 

resources, internal snoop logic monitors the internal bus for communication processor module (CPM) 
accesses of the address associated with the last lwarx instruction. 


Atomic update 
primitives 


















The effect of | The LSU hardware supports all PowerPC integer load/store instructions. Naturally-aligned operands 


operand give optimal performance for a maximum size of four bytes. Unaligned operands are supported in 
placement on | hardware and are broken into a series of aligned transfers. The effect of operand placement on 
performance | performance is as stated in the VEA, except for 8-byte operands. Because the MPC850 uses a 32-bit 


data bus, performance is good rather than optimal. See Section 3.5.3.5, “Unaligned Accesses for a 
description of integer unaligned instruction execution and timing and to Section 9.2.2, “String 
Instruction Latency,” for a description of string instruction timing. 
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Table 3-4. VEA-Level Features (Continued) 


fem 


Memory The MPC850 interprets cache control instructions as if they pertain only to the MPC850 cache. 
control These instructions do not broadcast. Any bus activity caused by these instructions results from an 
instructions operation performed on the MPC850 cache and not because of the instruction itself. 

* Instruction Cache Block Invalidate (icbi)— The MMU translates the EA and the associated 
instruction cache block is invalidated if hit. . 

* Instruction Synchronize (isync)—The isync instruction waits for all previous instructions to 
complete and then discards any prefetched instructions, causing subsequent instructions to be 
fetched or refetched from memory and executed. 

+ Data Cache Block Touch (debt) and Data Cache Block Touch for Store (dcbtst)— The appropriate 
cache block is checked for a hit. If it is a miss, the instruction is treated as a regular miss, except 
that bus error does not cause an exception. If no error occurs, the cache is updated. 

* Data Cache Block Set to Zero (dcbz)— Executes as defined in the VEA. 

- Data Cache Block Store (dcbst)— Executes as defined in the VEA. 

* Data Cache Block Invalidate (dcbi)—-The MMU translates the EA and the associative data cache 
block is invalidated if hit. . . 

* Data Cache Block Flush (dcbf)— Executes as defined inthe VEA. 

* Enforce In-Order Execution of I/O (eieio) —-When executing an eieio instruction, the LSU waits for 
previous accesses to terminate before beginning accesses associated with load/store instructions 
after the eieio instruction. 


Time base The time base functions as defined by the VEA and supports an additional implementation-specific 
exception. The time base is described in Chapter 10, “System Interface Unit,’ and in Chapter 14, 
“Clocks and Power Control.” 





Table 3-5 summarizes MPC850 features with respect to the OEA definition. 
Table 3-5. OEA-Level Features 


es] 


| Machine state | The floating-point exception mode (bits FEO and FE1) is ignored by the MPC850. The IP bit initial 
register state after reset is set as programmed by the reset configuration specified in Section 6.1.2.1, 
“System Reset Interrupt (0x00100).” 


Processor The value of the PVR register’s version field is Ox0050. The value of the revision field is OxO0000 and 
version register | it is incremented each time the software distinguishes between the revisions. 


Other OEA The following registers are not implemented: SDR1, BAT registers, segment registers, and EAR 
registers 


Page size The MPC850 differs from the OEA-defined memory management mode with respect to page sizes. 
Page sizes are 4, 16, and 512 Kbytes, and 8 Mbytes with an optional subpage granularity of 1 Kbyte 
for 4-Kbyte pages in a maximum physical memory size of 4 Gbytes. Neither ordinary or direct-store 
segments are supported. 


Address space | The MPC850 differs from the OEA-defined memory management model. Specifically, it does not 
support the same address translation mechanism that requires an intermediate 52-bit virtual 
address. It also does not support block address translation or the associated block address 
translation SPRs. In its place, the MPC850’s internal memory space includes memory-mapped 
control registers and memory used by various modules on the chip. This memory is part of the main 
memory as seen by the core but cannot be accessed by any external system device. 
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Table 3-5. OEA-Level Features (Continued) 


Address If address translation is disabled (MSRI[IR] = 0 for instruction accesses or MSR[DR] = 0 for data 
translation accesses), the EA is treated as the physical address and is passed directly to the memory 
subsystem. Otherwise, the EA is translated by using the MMU’s TLB mechanism. Instructions are 
not fetched from no-execute or guarded memory and data accesses are not executed speculatively 
to or from the guarded memory. The features of the MMU hardware are as follows: 
* 8-entry fully associative ITLB 
* 8-entry fully associative DTLB 
* Supports up to 16 virtual address spaces 
* Supports 16 access protection groups 
* Supports fast software table search mechanism 
The MPC850 MMU is described in detail in Chapter 8, “Memory Management Unit.” 


Reference and | No reference bit is supported by the MPC850. However, the change bit is supported by using the 
change bits data TLB error exception mechanism when writing to an unmodified page. 


Memory Two protection modes are supported by the MPC850: 
protection * Domain manager mode ~ 
* PowerPC mode 
See Chapter 8, “Memory Management Unit.” 
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Chapter 4 
PowerPC Core Register Set 


This chapter describes the software-accessible registers implemented on the MPC850. 
These include registers that are defined by the PowerPC architecture and registers that are 
specific to the MPC850. This section does not include registers that are part of the 
communication processor module (CPM); these registers are described in Part V, 
“Communications Processor Module.” Refer to the PowerPC Family: The Programming 
Environments for 32-Bit Microprocessors for more information about the PowerPC 
architecture’s register definition. 


4.1 MPC850 Register Implementation 
Registers implemented in the MPC850 core can be grouped as follows: 


e Registers defined by the PowerPC architecture. There are two types of PowerPC 
registers. 


— User registers, which can be accessed by user-level software. All PowerPC 
user-level registers are defined by the user instruction set architecture (UISA) 
except for the time base registers, which can be read by user-level software and 
are defined by the virtual environment architecture (VEA). User registers are 
described in Section 4.1.1, “PowerPC Registers — User Registers.” 


— Supervisor registers, which can be accessed by supervisor software and in some 
cases are the automatic result of hardware activity, such as when an exception is 
taken and when the system is reset. All supervisor registers are defined by the 
operating environment architecture (OEA), except the time base registers, which 
can be written to only by supervisor software and are defined by the VEA. 
PowerPC supervisor registers are described in Section 4.1.2, “PowerPC 
Registers — Supervisor Registers.” 


The UISA, VEA, and OEA architecture definitions are described in Section 3.1.1, 
“Levels of the PowerPC Architecture.” 


e MPC850-specific registers. These registers are either supervisor-level registers or 
debug registers. These are described briefly in Section 4.1.3, “MPC850-Specific 
SPRs,” but are described thoroughly in later chapters. Table 4-9 and Table 2-1 
provide cross references to the sections in this book where each register is described. 
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4.1.1 PowerPC Registers— User Registers 


The MPC850 implements the user-level registers defined by the PowerPC architecture 
except those required for supporting floating-point operations (the floating-point register 
file (FPRs) and the floating-point status and control register (FPSCR)). User-level, 
PowerPC registers are listed in Table 4-1 and Table 4-2. Table 4-2 lists user-level 
special-purpose registers (SPRs). 


Table 4-1. User-Level PowerPC Registers 
[eaten [none] Smmens————_[peir tn Sin ee 
The thirty-two 32-bit (GPRs) are used for source Raul ee 
registers , | and destination operands. 
CR ioe Section 4.1.1.1.1, “Condition Resistor 
| © |(CR)?’ 


Table 4-2 lists SPRs defined by the PowerPC architecture implemented on the MPC850. 
| Table 4-2. User-Level PowerPC SPRs 


SPR Number 
Comments 


00000 00001 XER See Section 4.1.1.1.3, | Write: Full sync 
“XER.” Read: Sync relative to load/store operations 
. 






















Serialize Access 


00000 01000 See the Programming 
Environments Manual 
00000 01001 See the Programming 


01000 01100 TBL read ' | Section 10.9, “The Write (as a store) 
5 PowerPC Timebase.” 
01000 01101 TBU read 


| Extended opcode for mftb, 371 rather than 339. | 
e Any write (mtspr) to this address causes an implementation-dependent software emulation exception. 





Environments Manual 


1 
268 
269 


4.1.1.1 PowerPC User-Level Register Bit Assignments 


This section describes bit assignments of PowerPC registers implemented by the MPC850. 
For more details, see the Programming Environments Manual for 32-Bit Processors. 


4.1.1.1.1 Condition Register (CR) 


The condition register (CR) is a 32-bit register that reflects the result of certain operations 
and provides a mechanism for testing and branching. The bits in the CR are grouped into 
eight 4-bit fields, CRO—CR7, as shown in Figure 4-1. 


0 3 4 7 8 31 


11 12 15 16 19 20 23 24 27 28 


Figure 4-1. Condition Register (CR) 
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The CR fields can be set in one of the following ways: 


e Specified fields of the CR can be set from a GPR by using the mterf instruction. 
e An merf instruction can move the contents of XER[O—3] to a CR field. 
e An merxr instruction can copy a specified XER field to a specified CR field. 
e Condition register logical instructions perform logical operations on specified CR 
bits. 
¢ CRO can be the implicit result of an integer instruction. 
e A specified CR field can indicate the result of an integer compare instruction. 
Note that branch instructions are provided to test individual CR bits. 
4.1.1.1.2 Condition Register CRO Field Definition 
For all integer instructions, when the CR is set to reflect the result of the operation (that is, 
when Rc = 1), and for addic., andi., and andis., CRO[O—2] are set by an algebraic 


comparison of the result to zero; CRO[3] 1s copied from XER[SO]. For integer instructions, 
CR[O-—3] reflects the result as a signed quantity. 


The CR bits are interpreted as shown in Table 4-3. If any portion of the result is undefined, 
the value placed into CRO[0-—3] 1s undefined. 


Table 4-3. Bit Settings for CRO Field of CR 


fo Negative (LT). Set when the result is negative. | 
a Positive (GT). Set when the result is positive (and not zero). 












Zero (EQ). Set when the result is zero. | 
Summary overflow (SO). This is a copy of the final state of XER[SO] at the completion of the instruction. 


Note that CRO may not reflect the true (that is, infinitely precise) result if overflow occurs. 





4.1.1.1.3 XER 
Figure 4-2 shows XER bit assignments. Settings are based on the final result produced by 
executing an instruction. 


rope [s+ [sel le [een pepele le 
fofwlat CO OSC 
a 


F meaeneustinesaacesnaneaaael Bont 
0000_0000_0000_0000 
LC 


Figure 4-2. XER Register 























MOTOROLA Chapter 4. PowerPC Core Register Set 4-3 


Part ll. PowerPC Microprocessor Module 





XER bits are described in Table 4-4. 
Table 4-4. XER Field Definitions 


Summary overflow. Set when an instruction (except mtspr) sets the overflow bit (OV). Once set, 
SO remains set until it is cleared by an mtspr(XER) or an merxr instruction. It is not altered by 
compare instructions or other instructions (except mtspr(XER) and merxr) that cannot overflow. 











Overflow. Set to indicate that an overflow occurred during execution of an instruction. Add, subtract 
from, and negate instructions with OE = 1 set OV if the carry out of the msb is not equal to the carry 
out of the msb + 1 and clear it otherwise. Multiply low and divide instructions with OE = 1 set OV if 
the result cannot be represented in 32 bits (mullw, divw, divwu) and clear it otherwise. The OV bit 
is not altered by compare instructions that cannot overflow (except mtspr(XER) and merxr). 













Carry. Set during execution of the following instructions: 
* Add carrying, subtract from carrying, add extended, and subtract from extended instructions set 
CA if there is a carry out of the msb, and clear it otherwise. 
¢ Shift right algebraic instructions set CA if any 1 bits have been shifted out of a negative operand, 
and clear it otherwise. 
The CA bit is not altered by compare instructions, nor by other instructions that cannot carry 
(except shift right algebraic, mtspr(XER), and merxr). 


25-31 |BCNT | Specifies the number of bytes to be transferred by a Load String Word Indexed (Iswx) or Store 
String Word Indexed (stswx) instruction. . 


Although divide instructions have a relatively long latency, they can update XER[OV] after 
one cycle. Therefore, data dependency on the XER is limited to one cycle, although the 
divide instruction latency can be a maximum of 11 clocks. | 















4.1.1.1.4 Time Base Registers 

The time base registers (TBU and TBL) are described in Section 10.9, “The PowerPC 
Timebase,’ and in Chapter 14, “Clocks and Power Control.’ The PowerPC architecture 
does not define an exception associated directly with the time base, but one is implemented 
in the MPC850. | 


4.1.2 PowerPC Registers— Supervisor Registers 


All supervisor-level registers implemented on the MPC850 are SPRs, except for the 
machine state register (MSR), described in Table 4-5. 


Table 4-5. Supervisor-Level PowerPC Registers 





Machine state register See Section 4.1 2.3.1, “Machine State Register (MSR).” | Write fetch sync 
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Table 4-6 lists supervisor-level SPRs defined by the PowerPC architecture. 
Table 4-6. Supervisor-Level PowerPC SPRs 


i Comments 
DSISR See the Programming Environments 


Manual and Section 4.1.2.1, “DAR, 
A 
E 









SPR Number 


Serialize Access 


SPR[5-9] | SPR[0-4] 

















00000 10010 Write: Full sync 
Read: Sync relative to 


load/store operations 





DSISR, and BAR Operation.” 








00000 10011 See the Programming Environments 
Manual and Section 4.1.2.1, “DAR, 


DSISR, and BAR Operation.” 


10110 DEC See Section 10.8.1, “Decrementer 
Register (DEC),” and in Chapter 14, 
“Clocks and Power Control” 
sant 
2 4 


Write: Full sync 
Read: Sync relative to load/ 
store operations 






00000 








00000 


11010 |SRRO See SRRO settings for individual Write 
exceptions in Chapter 6, “Exceptions.” 
SRR1 See SRR1 settings for individual Write | 
exceptions in Chapter 6, “Exceptions.” 


10000 {|SPRGO See the Programming Environments | Write 


00000 11011 





01000 








01000 


Faani Manual. 
10010 
10011 
11100 See Section 10.9, “The PowerPC 


Timebase a and Chapter 14, “Clocks 
11101 and Power Control.” 


PVR Section 4.1.2.3.2, “Processor Version | No (read-only register) 
Register.” 


: Any read (mftb) to this address causes an implementation-dependent software emulation exception. 


4.1.2.1 DAR, DSISR, and BAR Operation 
The LSU updates the DAR, DSISR, and BAR when an exception 1s taken. 
e When a bus error occurs, the data address register (DAR) is loaded with the effective 


address. For instructions that generate multiple accesses, the effective address of the 
first offending tenure is loaded. 


01000 
01000 


Write (as a store) 






01000 
01000 


01000 11111 


19 





e The DSI status register (DSISR) notifies the error handler when an exception is 
caused by a load or store. For a data MMU error, the data MMU loads the DSISR 
with error status. For alignment exceptions, the DSISR is loaded with the instruction 
information as defined by the PowerPC architecture. 
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e The breakpoint address register (BAR) notifies the address on which a data 
breakpoint occurred. For a multiple-cycle instruction, the BAR contains the address 
of the first cycle with which the breakpoint condition was associated. The BAR has 
a valid value only when a data breakpoint exception is taken. At any other time, its 

value is boundedly undefined (this term is defined very specifically by the PowerPC 
architecture and is discussed in the Programming Environments Manual). 


The following situations cause the DAR, BAR, and DSISR registers to be updated. 
Table 4-7. Value Summary of the DAR, BAR, and DSISR Registers 


Software emulation exception 


4.1.2.2 Unsupported Registers | 
The MPC850 does not support the following OEA registers: 
¢ DBATs and IBATs —The MPC850 does not support block address translation. 
¢ EAR—The MPC850 does not support the optional external access facility. 
¢ SDR1—The MPC850 does not support memory segments. 
e Segment registers —The MPC850 does not support memory segments. 





Exception Type 






O 
| 





















4.1.2.3 PowerPC Supervisor-Level Register Bit Assignments 

This section describes bit assignments of supervisor-level PowerPC registers implemented 
by the MPC850. For more details, see the Programming Environments Manual for 32-Bit 
Processors. | | 


4.1.2.3.1 Machine State Register (MSR) 

The 32-bit machine state register (MSR) is used to configure such parameters as the 
privilege level, whether translation is enabled, and the endian-mode. It can be read by the 
mfmsr instruction and modified by the mtmsr, sc, and rfi instructions. 
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Figure 4-3. Machine State Register (MSR) 


When an exception is taken, most MSR bits are saved in the SRR1 and the MSR is 
reconfigured with the state of the exception handler using the values in Figure 4-3. This 
process is described in Section 6.1.6, “Exception Latency.” 


After a hard reset, MSR[IP] takes the value specified in hard reset configuration word. See 
Section 11.3.1.1, “Hard Reset Configuration Word.” MSR bits are described in Table 4-8. 


Table 4-8. MSR Field Descriptions 


me [eee 


13 POW | Power management enable 
0 Power management enabied (normal operation mode) 
1 Power management disabled (reduced power mode) 
Note: Power management functions are implementation-dependent; see Section 14.5, “Power 


Control (Low-Power Modes).” 


Sa 
Exception little-endian mode. When an exception occurs, this bit is copied into MSR[LE] to select the 
endian mode for the context established by the exception. 

External interrupt enable 


0 The processor delays recognition of external and decrementer interrupt conditions. 
1 The processor is enabled to take an external or decrementer interrupt. 


Privilege level 
0 The processor can execute both user- and supervisor-level instructions. 
1 The processor can only execute user-level instructions. 


Floating-point available. 

0 The processor prevents dispatch of floating-point instructions, including floating-point loads, stores, 
and moves. 

1 The processor can execute floating-point instructions. (This setting is invalid on the MPC850) 


19 ME! | Machine check enable 
0 Machine check exceptions are disabled. 
1 Machine check exceptions are enabled. 


a 
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Table 4-8. MSR Field Descriptions (Continued) 


A 
Single-step trace enable ( (Optional) 
0 The processor executes instructions normally. 
1 Asingle-step trace exception is generated when the next instruction executes successfully. 
Note: If the function is not implemented, SE is treated as reserved. 
7 instruction, regardless of whether the branch was taken. 
Note: If the function is not implemented, this bit is treated as reserved. 
pees[= ewes 
25 Exception prefix. The setting of IP specifies whether an exception vector offset is prepended with Fs 
or Os. In the following description, nnnnn is.the offset of the exception vector. See Table 6-1. 
0 Exceptions are vectored to the physical address 0x000n_nnnn 
1 Exceptions are vectored to the physical address OxFFFn_nnnn 
. The reset value of IP is determined by the IIP bit (bit 2) in the hard reset configuration word. See 
Section 11.3.1.1, “Hard Reset Configuration Word.” Subsequent soft resets cause IP to revert to the 
27. | DR 
1 Data address translation is enabled. 
For more information, see Chapter 8, “Memory Management Unit.” 
a CEE 
Recoverable exception (for system reset and machine check exceptions). 
0 Exception is not recoverable. 


value latched during hard reset configuration. 

1 Exception is recoverable. 
For more information, see Chapter 6, “Exceptions.” 

| These bits are loaded into SRR1 when an exception is taken. These bits are written back into the MSR when an 

rfi is executed. 















Branch trace enable (Optional) | 
0 The processor executes branch instructions normally. 
1 The processor generates a branch trace exception after completing the execution of a branch 























Instruction address translation 

0 Instruction address translation is disabled. 

1 Instruction address translation is enabled. 

For more information, see Chapter 8, “Memory Management Unit.” 












Data address translation 
O Data address translation is disabled. 












Little-endian mode enable 
0 The processor runs in big- -endian mode. 
1 The processor runs in little-endian mode. 






4.1.2.3.2 Processor Version Register 


The value of the PVR register’s version field is OxO0050. The value of the revision field is 
incremented each time the core is revised. 


4.1.3 MPC850-Specific SPRs 


Table 4-2 and Table 4-9 list SPRs specific to the MPC850. Debug registers, which have 
additional protection, are described in Chapter 36, “System Development and Debugging.” 
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Supervisor-level registers are described in Table 4-9. 


Table 4-9. MPC850-Specific Supervisor-Level SPRs 


SPR Number 


EIE See Section 6.1.5, “Recoverability 
after an Exception.” 

EID Wit 
Section 10.4.1, “Internal Memory Write (as a store) 


10011 11110 
| Map Register (IMMR).” 
10001 10000 |IC_CST Section 7.3.1, “Instruction Cache Write (as a store) 
| Control Registers” 
10001 10001 IC_ADR Section 7.3.1, “Instruction Cache Write (as a store) | 
Control Registers” 
10001 10010 |IC_DAT Section 7.3.1, “Instruction Cache Write (as a store) 
Control Registers” 
10001 11000 |DC_CST Section 7.3.2, “Data Cache Control Write (as a store) 
Registers” 
10001 11001 DC_ADR Section 7.3.2, “Data Cache Control Write (as a store) 
Registers” 
10001 11010 |DC_DAT Section 7.3.2, “Data Cache Control Write (as a store) 
Registers” 
11000 10000 |MI_CTR Section 8.8.1, “IMMU Control Register | Write (as a store) 
(MI_CTR)” 
Protection Registers 


11000 10010 |MI_AP 
(MI_AP/MD_AP)” 

11000 10011 | MI_LEPN Section 8.8.3, “IMMU/DMMU Effective | Write (as a store) 
Page Number Register (Mx_EPN)” 

11000 10101 |MI_LTWC Section 8.8.4, “IMMU Tablewalk Write (as a store) 

(MI_L1DL2P) Control Register (MI_TWC) 

11000 10110 |MI_RPN Section 8.8.6, “IMMU Real Page Write (as a store) 
Number Register (MI_RPN)” 

11001 10000 {MI_CAM Section 8.8.12.1, “IMMU CAM Entry | Write (as a store) 
Read Register (MI_CAM)” 

11001 10001 |MI_RAMO Section 8.8.12.2, “IMMU RAM Entry | Write (as a store) 
Read Register 0 (MI_RAMO)” 

11001 10010 |MI_RAM1 Section 8.8.13, “DMMU RAM Entry Write (as a store) 
Read Register 1 (MD_RAM1)” 

11000 11000 |MD_CTR Section 8.8.2, “DMMU Control Write (as a store) 
Register (MD_CTR).” 


Serialize Access 


Comments 





Write 


Fetch-only 


Section 8.8.10, “MMU Access Write (as a store) 








81 
82 
631 
638 
560 
561 
562 
568 
569 
570 
784 
786 
787 
789 
790 
816 
817 
818 
92 


7 
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Table 4-9. MPC850-Specific Supervisor-Level SPRs (Continued) 


Comments 


M_CASID Section 8.8.9, “MMU Current Address | Write (as a store) | 
Space ID Register (M_CASID)” | 
MD_AP Section 8.8.10, “MMU Access Write (as a store) 


Protection Registers 
(MI_AP/MD_AP)” 


MD_EPN Section 8.8.3, “IMMU/DMMU Effective | Write (as a store 
Page Number Register (Mx_EPN)” 
11100 M_TWB Section 8.8.8, “MMU Tablewalk Base | Write (as a store) 
(MD_L1P) Register (M_TWB)” | | 
















SPR Number 






Serialize Access 






SPR[0-4] 


793 11000 11001 







794 11000 11010 








795 11000 11011 
796 11000 


197 11000 


798 11000 







) 
11110 | Section 8.8.7, “DMMU Real Page Write (as a store) 
Number Register (MD_RPN)” | 
M_TW (M_SAVE) | Section 8.8.11, “MMU Tablewalk Write (as a store) 
Special Register (M_TW)” 
MD_CAM Section 8.8.12.4, “DMMU CAM Entry | Write (as a store) 
Read Register (MD_CAM)” 
MD_RAMO Section 8.8.12.5, “DMMU RAM Entry | Write (as a store) 
Read Register 0 (MD_RAMO)” 
MD_RAM1 Section 8.8.13, “DMMU RAM Entry Write (as a store) 
Read Register 1 (MD_RAM1)” 


1 Fetch-only register; mtspr is ignored; using mfspr gives an undefined value. 


11101 MD_TWC Section 8.8.5, “DMMU Tablewalk Write (as a store) 
(MD_L1DL2P) Control Register (MD_TWC)” 


799 11000 11111 


824 11001 11000 


825 11001 11001 


826 11001 11010 











Debug-level registers are described in Table 4-10. These registers are described in 
Section 36.5.1, “Development Support Registers.” 


Table 4-10. MPC850-Specific Debug-Level SPRs 





SPR Number 


Serialize Access 
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Table 4-10. MPC850-Specific Debug-Level SPRs (Continued) 


SPR Number 


ar 00100 | 11000 
a] 00100 | 11001 
00100 | 11010 
lie 00100 | 11011 

















Serialize Access 


CMPE Write: Fetch sync | 

Read: Sync relative to load/store operations 
CMPF Write: Fetch sync 

Read: Sync relative to load/store operations 
CMPG Write: Fetch sync 

Read: Sync relative to load/store operations 
CMPH Write: Fetch sync 

Read: Sync relative to load/store operations 
LCTRL1 Write: Fetch sync 

Read: Sync relative to load/store operations 
LCTRL2 Write: Fetch sync 

Read: Sync relative to load/store operations 


AR Write: Fetch sync 
Read: Sync relative to load/store operations. See 
Section 4.1.2.1, “DAR, DSISR, and BAR Operation.” 


Read and Write 


00100 11100 
00100 11101 


00100 11110 


00100 11111 





10110 |DPDR 


10011 


4.1.3.1 Accessing SPRs 


All SPRs are accessed using the mtspr and mfspr instructions, regardless of whether they 
are within the processor core. To access registers outside of the core, an internal bus tenure 
occurs using the address lines as described in Table 4-11. 


Table 4-11. Addresses of SPRs Located Outside of the Core 


Address Lines 


Address errors in this tenure cause a software emulation exception. 











4.2 Register Initialization at Reset 


This section describes how basic registers are set under reset conditions, other register 
settings are described in Chapter 7, “Instruction and Data Caches,’ and Chapter 8, 
“Memory Management Unit.’ 


A system reset interrupt occurs when a nonmaskable interrupt is generated either by the 
software watchdog timer or the assertion of IRQO. The only registers affected by the system 
reset interrupt are MSR, SRRO, and SRR1; no other reset activity occurs. Section 6.1.2.1, 
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“System Reset Interrupt (0x00100),’ describes values for these registers after system reset. 


When a hard or soft reset occurs, registers are set in the same way, as follows: 


e SRRO, SRR1—Set to an undefined value. 

e MSR[IP]— Programmable through the IIP bit in the hard reset configuration word. 
e MSR[ME]—Cleared. 

© ICTRL—Cleared. 

e LCTRL1—Cleared. 

¢ LCTRL2—Cleared. 

¢ COUNTA[16—31]—Cleared. 

¢ COUNTB[16—31]—Cleared. 

¢ JICR—Cleared (no exception occurred). 

¢ DER[2,14,28-31]—Set (all debug-specific exceptions cause debug mode entry). 


Reset values for memory-mapped registers are provided with individual register 
descriptions throughout this manual. 
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Chapter 5 
MPC850 Instruction Set 


This chapter describes the PowerPC instructions implemented by the MPC850. These 
instructions are organized by the level of architecture in which they are implemented — 
UISA, VEA, and OEA. These levels are described in Section 3.1.1, “Levels of the PowerPC 
Architecture.” 


5.1 Operand Conventions 


This section describes the operand conventions as they are represented in two levels of the 
PowerPC architecture. It also provides detailed descriptions of conventions used for storing 
values in registers and memory, accessing the MPC850’s registers, and representation of 
data in these registers. 


5.1.1 Data Organization in Memory and Data Transfers 


Bytes in memory are numbered consecutively starting with 0. Each number is the address 
of the corresponding byte. 


Memory operands may be bytes, half words, words, or double words, or, for the load/store 
multiple and move assist instructions, a sequence of bytes or words. The address of a 
memory operand is the address of its first byte (that is, of its lowest-numbered byte). 


5.1.2 Aligned and Misaligned Accesses 


The operand of a single-register memory access instruction has a natural alignment 
boundary equal to the operand length. In other words, the natural address of an operand is 
an integral multiple of the operand length. A memory operand is said to be aligned if it is 
aligned at its natural boundary; otherwise it is misaligned. 


Operands for single-register memory access instructions have the characteristics shown in 
Table 5-1. (Although not permitted as memory operands, quad words are shown because 
quad-word alignment is desirable for certain memory operands.) 
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Table 5-1. Memory Operands 


Operand Addr[28-31] If Aligned 


Quad word 16 bytes 0000 


‘Note: An “x” in an address bit position indicates that the bit can be 0 or 1 
independent of the state of other bits in the address. 





The concept of alignment is also applied more generally to data in memory. For example, 
a 12-byte data item is said to be word-aligned if its address is a multiple of four. 


Any memory access that crosses an alignment boundary must be broken into multiple 
discrete accesses. For the case of string accesses, the hardware makes no attempt to get 
aligned in an effort to reduce the number of discrete accesses. (Multiword accesses are 
architecturally required to be aligned.) The resulting performance degradation depends 
upon how well each individual access behaves with respect to the memory hierarchy. At a 
minimum, additional cache access cycles are required. More dramatically, for the case of 
access to a noncacheable page, each discrete access involves an individual bus operation 
which will reduce the effective bandwidth of the bus. 


The frequent use of misaligned accesses is discouraged since they can compromise the 
overall performance of the processor. 


5.2 Instruction Set Summary 


This section describes instructions and addressing modes defined for the MPC850. These 
instructions are divided into the following functional categories: 


¢ Integer instructions—These include arithmetic and logical instructions. For more 
information, see Section 5.2.4.1, “Integer Instructions.” 


¢ Load and store instructions — These include integer load and store instructions only. 
For more information, see Section 5.2.4.2, “Load and Store Instructions.” 


¢ Flow control instructions — These include branching instructions, condition register 
logical instructions, and other instructions that affect the instruction flow. For more 
information, see Section 5.2.4.3, “Branch and Flow Control Instructions.” 


e Trap instructions—These instructions are used to test for a specified set of 
conditions; see Section 5.2.4.4, “Trap Instructions,’ for more information. 


e Processor control instructions — These instructions are used for synchronizing 
memory accesses and managing caches and TLBs. For more information, see 
Sections 5.2.4.5,5.2.5.1, and 5.2.6.2. 
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e Memory synchronization instructions— These instructions are used for memory 
synchronizing. See Sections 5.2.4.6 and 5.2.5.2 for more information. 


e Memory control instructions— These instructions provide control of caches, and 
TLBs. For more information, see Sections 5.2.5.3 and 5.2.6.3. 


e System linkage instructions— For more information, see Section 5.2.6.1, “System 
Linkage Instructions.” 


Note that this grouping of instructions does not necessarily indicate the execution unit that 
processes a particular instruction or group of instructions. This information, which is useful 
in taking full advantage of the MPC850’s parallel instruction execution, is provided in 
Chapter 8, “Instruction Set,” in The Programming Environments Manual. 


Integer instructions operate on word operands. The PowerPC architecture uses instructions 
that are four bytes long and word-aligned. It provides for byte, half word, and word operand 
loads and stores between memory and a set of 32 general-purpose registers (GPRs). 


Arithmetic and logical instructions do not read or modify memory. To use the contents of a 
memory location in a computation and then modify the same or another memory location, 
the memory contents must be loaded into a register, modified, and then written to the target 
location using load and store instructions. 


The description of each instruction includes the mnemonic and a formatted list of operands. 
To simplify assembly language programming, a set of simplified mnemonics (extended 
mnemonics in the architecture specification) and symbols is provided for some of the 
frequently-used instructions; see Appendix F, “Simplified Mnemonics,’ in The 
Programming Environments Manual for a complete list of simplified mnemonic examples. 


5.2.1 Classes of Instructions 
The MPC850 instructions belong to one of the following three classes: 


e Defined 
e Tilegal 
e Reserved 


Note that while the definitions of these terms are consistent among the PowerPC 
processors, the assignment of these classifications is not. For example, an instruction that 
is specific to 64-bit implementations is considered defined for 64-bit implementations but 
illegal for 32-bit implementations such as the MPC850. 


The class is determined by examining the primary opcode and the extended opcode, if any. 
If the opcode, or combination of opcode and extended opcode, is not that of a defined 
instruction or of a reserved instruction, the instruction is illegal. 


In future versions of the PowerPC architecture, instruction codings that are now illegal may 
become assigned to instructions in the architecture, or may be reserved by being assigned 
to processor-specific instructions. 
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5.2.1.1 Definition of Boundedly Undefined 


If instructions are encoded with incorrectly set bits in reserved fields, the results on 
execution can be said to be boundedly undefined. If a user-level program executes the 
incorrectly coded instruction, the resulting undefined results are bounded in that a spurious 
change from user to supervisor state is not allowed, and the level of privilege exercised by 
the program in relation to memory access and other system resources cannot be exceeded. 
Boundedly undefined results for a given instruction may vary between implementations, 
and between execution attempts in the same implementation. 


5.2.1.2 Defined Instruction Class 


Defined instructions are guaranteed to be supported in all PowerPC implementations, 
except as stated in the instruction descriptions in Chapter 8, “Instruction Set,” in The 
Programming Environments Manual. The MPC850 provides hardware support for all 
instructions defined for 32-bit implementations, except floating-point instructions. 


A PowerPC processor invokes the illegal instruction error handler (part of the program 
exception) when the unimplemented PowerPC instructions are encountered so they may be 
emulated in software, as required. 


A defined instruction can have invalid forms, as described in the following section. 


5.2.1.3 Illegal Instruction Class 
Hlegal instructions can be grouped into the following categories: 


e Instructions that are not implemented in the PowerPC architecture. These opcodes 
are available for future extensions of the PowerPC architecture; that is, future 
versions of the PowerPC architecture may define any of these instructions to 
perform new functions. 7 


The following primary opcodes are defined as illegal but may be used in future 
extensions to the architecture: 


1,4,5,6,9, 22, 56,57, 60, 61 


e Instructions that are implemented in the PowerPC architecture but are not 
implemented in a specific PowerPC implementation. For example, instructions that 
can be executed on 64-bit PowerPC processors are considered illegal by 32-bit 
processors. 


The following primary opcodes are defined for 64-bit implementations only and are 
illegal on the MPC850: 


2, 30, 58, 62 


e All unused extended opcodes are illegal. The unused extended opcodes can be 
determined from information in Section A.2, “Instructions Sorted by Opcode,” in 
the Programming Environments Manual and Section 5.2.1.4, “Reserved Instruction 
Class.” Notice that extended opcodes for instructions that are defined only for 64-bit 
implementations are illegal in 32-bit implementations, and vice versa. | 
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The following primary opcodes have unused extended opcodes. 


17, 19, 31, 59, 63 (primary opcodes 30 and 62 are illegal for all 32-bit 
implementations, but as 64-bit opcodes they have some unused extended opcodes) 


e An instruction consisting entirely of zeros is guaranteed to be an illegal instruction. 
This increases the probability that an attempt to execute data or uninitialized 
memory invokes the system illegal instruction error handler (a program exception). 
Note that if only the primary opcode consists of all zeros, the instruction is 
considered a reserved instruction. This is further described in Section 5.2.1.4, 
‘Reserved Instruction Class.” 


An attempt to execute an illegal instruction invokes the illegal instruction error handler (a 
program exception) but has no other effect. See Section 6.1.2.7, “Program Exception 
(0x00700),’ for additional information about illegal and invalid instruction exceptions. 


With the exception of the instruction consisting entirely of binary zeros, the illegal 
instructions are available for further additions to the PowerPC architecture. 


5.2.1.4 Reserved Instruction Class 

Reserved instructions are allocated to specific implementation-dependent purposes not 
defined by the PowerPC architecture. An attempt to execute an unimplemented reserved 
instruction invokes the illegal instruction error handler (a program exception). See 
Section 6.1.2.7, “Program Exception (0x00700),” for additional information about illegal 
and invalid instruction exceptions. 


The following types of instructions are included in this class: 
e Implementation-specific instructions 


e Optional instructions defined by the PowerPC architecture but not implemented by 
the MPC850 (for example, Floating Square Root (fsqrt) and Floating Square Root 
Single (fsqrts) instructions) 


5.2.2 Addressing Modes 


This section provides an overview of conventions for addressing memory and for 
calculating effective addresses as defined by the PowerPC architecture for 32-bit 
implementations. For more detailed information, see “Conventions,” in Chapter 4, 
“Addressing Modes and Instruction Set Summary,’ of The Programming Environments 
Manual. 


5.2.2.1 Memory Addressing 

A program references memory using the effective (logical) address computed by the 
processor when it executes a memory access or branch instruction or when it fetches the 
next sequential instruction. 
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5.2.2.2 Effective Address Calculation 


An effective address (EA) is the 32-bit sum computed by the processor when executing a 
memory access or branch instruction or when fetching the. next sequential instruction. For 
a memory access instruction, if the sum of the effective address and the operand length 
exceeds the maximum effective address, the memory operand is considered to wrap around 
from the maximum effective address through effective address 0, as described in the 
following paragraphs. | 


Effective address computations for both data and instruction accesses use 32-bit unsigned 
binary arithmetic. A carry from bit 0 is ignored. 


Load and store operations have three categories of effective address generation: 


e Register indirect with immediate index mode 
¢ Register indirect with index mode 
¢ Register indirect mode 


Refer to Section 5.2.4.2.1, “Integer Load and Store Address Generation,’ for further 
discussion of effective address generation for load and store operations. 


Branch instructions have three categories of effective address generation: 
¢ Immediate — | | 
¢ Link register indirect 
e Count register indirect 


Refer to Section 5.2.4.3.1, “Branch Instruction Address Calculation,’ for further discussion 
of branch instruction effective address generation. | 


5.2.2.3 Synchronization 


The synchronization described in this section refers to. the state of the processor that is 
performing the synchronization. 


5.2.2.3.1 Context Synchronization 


The System Call (sc) and Return from Interrupt (rfi) instructions perform context 
synchronization by allowing previously issued instructions to complete before performing 
a change in context. Execution of one of these instructions ensures the following: 


e No higher priority exception exists (sc). 


e All previous instructions have completed to a point where they can no longer cause 
an exception. 


_® Previous instructions complete execution in the context (privilege, PIORe On, and 
address translation) under which they were issued. 


e The instructions following the sc or rfi instruction execute in the context established 
by these instructions. 
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5.2.2.3.2 Execution Synchronization 

An instruction is execution synchronizing if all previously initiated instructions appear to 
have completed before the instruction is initiated or, in the case of the Synchronize (sync) 
and Instruction Synchronize (isync) instructions, before the instruction completes. For 
example, the Move to Machine State Register (mtmsr) instruction is execution 
synchronizing. It ensures that all preceding instructions have completed execution and will 
not cause an exception before the instruction executes, but does not ensure subsequent 
instructions execute in the newly established environment. For example, if the mtmsr sets 
the MSR[PR] bit, unless an isyne immediately follows the mtmsr instruction, a privileged 
instruction could be executed or privileged access could be performed without causing an 
exception even though the MSR[PR] bit indicates user mode. 


5.2.2.3.3 Instruction-Related Exceptions 

There are two kinds of exceptions in the MPC850— those caused directly by the execution 
of an instruction and those caused by an asynchronous event. Either may cause components 
of the system software to be invoked. 


Exceptions can be caused directly by the execution of an instruction as follows: 


e An attempt to execute an illegal instruction causes the illegal instruction (program 
exception) handler to be invoked. An attempt by a user-level program to execute the 
supervisor-level instructions listed below causes the privileged instruction (program 
exception) handler to be invoked. The MPC850 provides the following 
supervisor-level instructions —dcbi, mfmsr, mfspr, mtmsr, mtspr, rfi, tlbie, and 
tibsync. Note that the privilege level of the mfspr and mtspr instructions depends 
on the SPR encoding. 


e An attempt to access memory that is not available (page fault) causes the ISI 
exception handler to be invoked. 

e An attempt to access memory with an effective address alignment that is invalid for 
the instruction causes the alignment exception handler to be invoked. See 
Section 6.1.2.6, “Alignment Exception (0x00600),” for restrictions on operand 
alignment. 

e The execution of an se instruction invokes the system call exception handler that 
permits a program to request the system to perform a service. 


e The execution of a trap instruction invokes the program exception trap handler. 


Exceptions caused by asynchronous events are described in Chapter 6, “Exceptions.” 


5.2.3 Instruction Set Overview 


This section provides a brief overview of the PowerPC instructions implemented in the 
MPC850 and highlights any special information with respect to how the MPC850 
implements a particular instruction. Note that the categories used in this section correspond 
to those used in Chapter 4, “Addressing Modes and Instruction Set Summary,” in The 
Programming Environments Manual. These categorizations are somewhat arbitrary and are 
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provided for the convenience of the programmer and do not necessarily reflect the PowerPC 
architecture specification. 


Note that some of the instructions have the following optional features: 


~¢ CR Update—The dot (.) suffix on the mnemonic enables the update of the CR. 
¢ Overflow option—The o suffix indicates that the overflow bit in the XER is enabled. 


5.2.4 PowerPC UISA Instructions 


The PowerPC UISA includes the base user-level instruction set (excluding a few user-level 
cache control, synchronization, and time base instructions), user-level registers, 


programming model, data types, and addressing modes. This section discusses the 
instructions defined in the UISA. 


5.2.4.1 Integer Instructions 
This section describes the integer instructions. These consist of the following: 
e Integer arithmetic instructions 
¢ Integer compare instructions 
¢ Integer logical instructions 
e Integer rotate and shift instructions 


Integer instructions use the content of the GPRs as source operands and place results into 
GPRs, into the XER, and into condition register (CR) fields. 


5.2.4.1.1 Integer Arithmetic Instructions 
Table 5-2 lists the integer arithmetic instructions for the MPC850. 


Table 5-2. Integer Arithmetic Instructions : 


[mene | 

EC 
Add Immediate Carrying and Record addi. = DIMM 
Subtract from Immediate Carrying subfic = RAI 
Subtract from Carrying , subfc (subfc. subfco subfco.) 
Add Extended a adde (adde. addeo addeo.) 


Add to Minus One Extended addme (addme. addmeo addmeo.) 
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Table 5-2. Integer Arithmetic Instructions (Continued) 


tenons |e 
Subtract from Minus One Extended 
Add to Zero Extended addze (addze. addzeo  addzeo.) 
Subtract from Zero Extended subfze (subfze. subfzeo  subfzeo.) 
Multiply Low Immediate mu rD,rA,SIMM 


Multiply Low mullw (muliw. muliwo mullwo.) 
Multiply High Word mulhw (mulhw.) rD,rA,rB 


Multiply High Word Unsigned mulhwu (mulhwu.) 
Divide Word divw | (divw.divwo divwo.) 
Divide Word Unsigned divwu (divwu. divwuo- divwuo.) 


' Implementation Note: Attempting to use divw to perform either 0x80000000 + -1 or <anything> + 0 sets the 
contents of rD to 0x80000000 and if Rc =1, the contents CRO are LT = 1, GT =0, and EQ =0. SO is set to the 
correct value. 

























rD,rA,rB 






= 
0) 
Ko] 
ry) 
- 
@ 


Although there is no Subtract Immediate instruction, its effect can be achieved by using an 
addi instruction with the immediate operand negated. Simplified mnemonics are provided 
that include this negation. The subf instructions subtract the second operand (rA) from the 
third operand (rB). Simplified mnemonics are provided in which the third operand is 
subtracted from the second operand. See Appendix F, “Simplified Mnemonics,” in The 
Programming Environments Manual for examples. 


5.2.4.1.2 Integer Compare Instructions 

The integer compare instructions algebraically or logically compare the contents of rA with 
either the UIMM operand, the SIMM operand, or the contents of rB. The comparison is 
signed for the cmpi and cmp instructions, and unsigned for the cmpli and cmpl 
instructions. Table 5-3 lists the integer compare instructions. 


Table 5-3. Integer Compare Instructions 


crfD,L,rA,SIMM 


Compare Immediate 


Compare Logical Immediate | lemph crfD,L,rA,UIMM 


; implementation Note: In these instructions, the L bit is applicable for 64-bit implementations. For the MPC850, 
if L = 1 the instruction form is invalid. The core ignores this bit and, therefore, the behavior when L = 1 is 
identical to the valid form instruction with L = 0. 


Compare Logical 





The crfD operand can be omitted if the result of the comparison is to be placed in CRO. 
Otherwise the target CR field must be specified in the instruction crfD field. 
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For more information refer to Appendix F, “Simplified Mnemonics,” in The Programming 
Environments Manual. 


5.2.4.1.3 Integer Logical Instructions 


The logical instructions shown in Table 5-4 perform bit-parallel operations. Logical 
instructions with the CR update enabled and instructions andi. and andis. set CR field CRO 
to characterize the result of the logical operation. These fields are set as if the sign-extended 
low-order 32 bits of the result were algebraically compared to zero. Logical instructions 
without CR update and the remaining logical instructions do not modify the CR. Logical 
instructions do not affect the XER[SO], XER[OV], and XER[CA] bits. 


For simplified mnemonics examples for the integer logical operations see Appendix F, 
“Simplified Mnemonics,” in The Programming Environments Manual. 


Table 5-4. Integer Logical instructions 


— 


5.2.4.1.4 Integer Rotate and Shift Instructions 


Rotation operations are performed on data from a GPR, and the result, or a portion of the 
result, is returned to a GPR. See Appendix F, “Simplified Mnemonics,” in The 
Programming Environments Manual for a complete list of simplified mnemonics that 
allows simpler coding of often-used functions such as clearing the leftmost or rightmost 
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bits of a register, left justifying or right justifying an arbitrary field, and simple rotates and 
shifts. 


Integer rotate instructions rotate the contents of a register. The result of the rotation is either 
inserted into the target register under control of a mask (if a mask bit is 1 the associated bit 
of the rotated data is placed into the target register, and if the mask bit is 0 the associated 
bit in the target register is unchanged), or ANDed with a mask before being placed into the 
target register. The integer rotate instructions are listed in Table 5-5. 





Table 5-5. Integer Rotate Instructions 


| te [tr 


The integer shift instructions perform left and right shifts. Immediate-form logical 
(unsigned) shift operations are obtained by specifying masks and shift values for certain 
rotate instructions. Simplified mnemonics are provided to make coding of such shifts 
simpler and easier to understand. The integer shift instructions are listed in Table 5-6. 
















Table 5-6. Integer Shift Instructions 


re 


5.2.4.2 Load and Store instructions 


Load and store instructions are issued and translated in program order; however, the 
accesses can occur out of order. Synchronizing instructions are provided to enforce strict 
ordering. This section describes the load and store instructions of the MPC850, which 
consist of the following: 













e Integer load instructions 

e Integer store instructions 

e Integer load and store with byte-reverse instructions 
e Integer load and store multiple instructions 

e Integer load and store string instructions 


5.2.4.2.1 Integer Load and Store Address Generation 


Integer load and store operations generate effective addresses using register indirect with 
immediate index mode, register indirect with index mode, or register indirect mode. See 
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Section 5.2.2.2, “Effective Address Calculation,’ for information about calculating 
effective addresses. Note that the MPC850 is optimized for load and store operations that 
are aligned on natural boundaries, and operations that are not naturally aligned may suffer 
performance degradation. Refer to Section 6.1.2.6.1, “Integer Alignment Exceptions,” for 
additional information about load and store address alignment exceptions. 


5.2.4.2.2 Register Indirect Integer Load Instructions | 


For integer load instructions, the byte, half word, or word addressed by the EA is loaded 
into rD. Many integer load instructions have an update form, in which rA is updated with 
the generated effective address. For these forms, the EA is placed into rA and the memory 
element (byte, half word, word, or double word) addressed by EA is loaded into rD. 
Table 5-7 lists the integer load instructions. 


Table 5-7. Integer Load Instructions 


Load Byte and Zero with Update 
Load Byte and Zero with Update Indexed tozuxfrDyrAB 
Load Half Word and Zero © the [rDtra) 
‘| Load Half Word and Zero Indexed 
Load Half Word and Zero with Update tnzu frDdra) 
nae 
a 
Cs Ce 
Load Half Word Algebraic with Update hau rd) 
Load Half Word Algebraic with Update Indexed thaux [DAB 

FE atl 

[ene 

et 

C2 ee 












Load Byte and Zero Indexed — 


Load Byte and Zero bz 
























Load Half Word and Zero with Update Indexed 
Load Half Word Algebraic 
Load Half Word Algebraic Indexed 


Load Word and Zero 


Load Word and Zero Indexed 
Load Word and Zero with Update 


Load Word and Zero with Update Indexed 
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5.2.4.2.3 Integer Store Instructions 

For integer store instructions, the contents of rS are stored into the byte, half word, word, 
or double word in memory addressed by the effective address (EA). Many store instructions 
have an update form, in which rA is updated with the EA. For these forms, the following 
rules apply: 


e IfrA =~ 0, the EA is placed into rA. 
e IfrS =rA, the contents of rS are copied to the target memory element, then the 
generated EA is placed into rA (rS). 


The MPC850 defines store with update instructions with rA = O and integer store 
instructions with the CR update option enabled (Rc[31] = 1) to be invalid forms. Table 5-8 
lists integer store instructions for the MPC850. 


Table 5-8. Integer Store Instructions 


Store Byte 


rS,d(rA) 


Store Byte Indexed ; stbx [SAB 
Store Byte with Update stu fry) 


Store Byte with Update Indexed 
Store Half Word 


dl 
Ba 
Store Half Word Indexed ste [SAB 
Store Half Word with Update situ SS”S~«*d SA) 
Store Half Word with Update Indexed sthux —SANB 
Store Word Indexed | stwx [SAB 
Store Word with Update stwu fry) 
Store Word with Update Indexed stwux SAB 


5.2.4.2.4 Integer Load and Store with Byte-Reverse Instructions 

Table 5-9 describes integer load and store with byte-reverse instructions. When used in a 
PowerPC system operating with the default big-endian byte order, these instructions have 
the effect of loading and storing data in little-endian order. Likewise, when used in a 
PowerPC system operating with little-endian byte order, these instructions have the effect 
of loading and storing data in big-endian order. For more information about big-endian and 
little-endian byte ordering, see “Byte Ordering” in Chapter 3, “Operand Conventions,” in 
The Programming Environments Manual. 








MOTOROLA Chapter 5. MPC850 Instruction Set 5-13 





Part ll. PowerPC Microprocessor Module 


Table 5-9. Integer Load and Store with Byte-Reverse Instructions. 


Load Half Word Byte-Reverse Indexed 


5.2.4.2.5 Integer Load and Store Multiple Instructions 

The integer load/store multiple instructions are used to move blocks of data to and from the 
GPRs. In some implementations, these instructions are likely to have greater latency and 
take longer to execute, perhaps much longer, than a sequence of individual load or store 
instructions that produce the same results. | 


Store Half Word Byte-Reverse Indexed 


[oad Word Byte-Reverse indeed ~*~ wx «dae 





Store Word Byte-Reverse Indexed 


When the MPC850 is operating with little-endian byte order, execution of a load or store 
multiple instruction causes the system alignment error handler to be invoked; see “Byte 
Ordering” in Chapter 3, “Operand Conventions,” in The Programming Environments 
Manual for more information. Table 5-10 lists the integer load and store multiple 
instructions for the MPC850. - 


Table 5-10. Integer Load and Store Multiple Instructions 


Store Multiple Word 





5.2.4.2.6 Integer Load and Store String Instructions 

The integer load and store string instructions allow movement of data from memory to 
registers or from registers to memory without concern for alignment. These instructions can 
be used for a short move between arbitrary memory locations or to initiate a long move 
between misaligned memory fields. 


When the MPC850 is operating with little-endian byte order, execution of a load or store 
string instruction causes the system alignment error handler to be invoked; see “Byte 
Ordering” in Chapter 3, “Operand Conventions,’ in The Programming Environments 
Manual for more information. Table 5-11 lists the integer load and store string instructions. 


Table 5-11. Integer Load and Store String Instructions 


Load String Word Immediate rD,rA,NB 
Load String Word Indexed 


Store String Word Immediate rS,rA,NB 


Store String Word Indexed rS,rA, 
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Load string and store string instructions may involve operands that are not word-aligned. 
As described in “Alignment Exception (0x00600)” in Chapter 6, “Exceptions,” in The 
Programming Environments Manual, a misaligned string operation suffers a performance 
penalty compared to a word-aligned operation of the same type. 





When a string operation crosses a page boundary, the instruction may be interrupted by a 
DSI exception associated with the address translation of the second page. In this case, the 
MPC850 performs some or all memory references from the first page and none from the 
second before taking the exception. On return from the DSI exception, the load or store 
string instruction will re-execute from the beginning. For more information, refer to “DSI 
Exception (0x00300)” in Chapter 6, “Exceptions,” in The Programming Environments 
Manual. 


5.2.4.3 Branch and Flow Control Instructions 


Branch instructions are executed by the branch processing unit (BPU). The BPU receives 
branch instructions from the fetch unit and performs condition register (CR) lookahead 
operations on conditional branches to resolve them early, achieving the effect of a 
zero-cycle branch in many cases. 


Some branch instructions can redirect instruction execution conditionally based on the 
value of bits in the CR. When the branch processor encounters one of these instructions, it 
scans the execution pipelines to determine whether an instruction in progress may affect the 
particular CR bit. If no interlock is found, the branch can be resolved immediately by 
checking the bit in the CR and taking the action defined for the branch instruction. 


If an interlock is detected, the branch is considered unresolved and the direction of the 
branch is predicted using static branch prediction as described in “Conditional Branch 
Control” in Chapter 4, “Addressing Modes and Instruction Set Summary,’ in the 
Programming Environments Manual. The interlock is monitored while instructions are 
fetched for the predicted branch. When the interlock is cleared, the branch processor 
determines whether the prediction was correct based on the value of the CR bit. If the 
prediction is correct, the branch is considered completed and instruction fetching continues. 
If the prediction is incorrect, the fetched instructions are purged, and instruction fetching 
continues along the alternate path. See Chapter 8, “Instruction Timing,’ for information 
about how branches are executed. 


5.2.4.3.1 Branch Instruction Address Calculation 


Branch instructions can alter the sequence of instruction execution. Instruction addresses 
are always assumed to be word aligned; the processor ignores the two low-order bits of the 
generated branch target address. 


RAGIN ARONSON UREA ERE ETRE EIREE OES E ETE SSO ATES EES OSS ORE OES EEE ELD TEE EE BENE EES SESS SEES IRIS EERE RB EIEIO RELIES SELES EEE TEESE OTE TTE IRE TIE IEE EEE TSS ESI I EIEIO SLE SEE GEE ISLE EE SLES AEE SSE ONE TIE OCS IETS 
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Branch instructions compute the effective address (EA) of the next instruction address 
using the following addressing modes: 


e Branch relative 


e Branch conditional to relative address 

e Branch to absolute address 

e Branch conditional to absolute address 
¢ Branch conditional to link register 
e Branch conditional to count register 


5.2.4.3.2 Branch Instructions 


Table 5-12 lists the branch instructions provided by the PowerPC processors. To simplify 
assembly language programming, a set of simplified mnemonics and symbols is provided 
for the most frequently used forms of branch conditional, compare, trap, rotate and shift, 
and certain other instructions. See Appendix F, “Simplified Mnemonics,” in The 
Programming Environments Manual for a list of simplified mnemonics. 


Table 5-12. Branch Instructions 


IE MR ind cnn 
Src Coriolis unchapas[poraed ‘(soa 


5.2.4.3.3 Condition Register Logical Instructions 


Condition register logical instructions, shown in Table 5-13, and the Move Condition 
Register Field (merf) instruction are also defined as flow control instructions. 













Table 5-13. Condition Register Logical Instructions 


eee 

coaionogsoran end 

conten Feseron sew =i 

conten egsernano_———amand_—_—_—[omOanewe 
emer 
cow 
nae 
ooo 
net 























crbD,crbA,crbB 
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Note that if the LR update option is enabled for any of these instructions, these forms of the 
instructions are invalid in the MPC850. 


5.2.4.4 Trap Instructions 

The trap instructions shown in Table 5-14 are provided to test for a specified set of 
conditions. If any of the conditions tested by a trap instruction are met, the system trap 
handler is invoked. If the tested conditions are not met, instruction execution continues 
normally. 


Table 5-14. Trap Instructions 





See Appendix F, “Simplified Mnemonics,’ in The Programming Environments Manual for 
a complete set of simplified mnemonics. 


5.2.4.5 Processor Control Instructions 


Processor control instructions are used to read from and write to the condition register 
(CR), machine state register (MSR), and special-purpose registers (SPRs), and to read from 
the time base register (TBU or TBL). 


5.2.4.5.1 Move to/from Condition Register Instructions 


Table 5-15 lists the instructions provided by the MPC850 for reading from or writing to the 
CR. 


Table 5-15. Move to/from Condition Register Instructions 


mins | Se 
Move to Condition Register Fields CRM,rS 





Move to Condition Register from XER merxr — ferfD 


Move from Condition Register 


5.2.4.6 Memory Synchronization Instructions—UISA 


Memory synchronization instructions control the order in which memory operations are 
completed with respect to asynchronous events, and the order in which memory operations 
are seen by other processors or memory access mechanisms. See Section 7.6.6, “Atomic 
Memory References,’ for additional information about these instructions and about related 
aspects of memory synchronization. Table 5-18 lists the UISA memory synchronization 
instructions for the MPC850. 
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Table 5-16. Memory Synchronization Instructions—UISA 


i ae 
| Store Word Conditional Indexed | stwox, — [rSrArB 


The sync instruction delays execution of subsequent instructions until previous instructions 
have completed to the point that they can no longer cause an exception and until all previous 
memory accesses are performed globally; the sync operation is not broadcast onto the 
MPC850 bus interface. Additionally, all load and store cache/bus activities initiated by prior 
instructions are completed. Touch load operations (debt and dcbtst) are required to 
complete at least through address translation, but not required to complete on the bus. 


Load Word and Reserve Indexed 





The functions performed by the sync instruction normally take a significant amount of time 
to complete; as a result, frequent use of this instruction may adversely affect performance. 
In addition, the number of cycles required to complete a sync instruction depends on 
system parameters and on the processor's state when the instruction is issued. 


The proper paired use of the lwarx and stwex. instructions allows programmers to emulate 
common semaphore operations such as “test and set,’ “compare and swap,’ “exchange 
memory,” and “fetch and add.” Examples of these semaphore operations can be found in 
Appendix E, “Synchronization Programming Examples,’ in The Programming 
Environments Manual. The Iwarx instruction must be paired with an stwex. instruction 
with the same effective address used for both instructions of the pair. Note that the 


reservation granularity is 16 bytes. 


The lwarx and stwex. instructions are implemented according to the PowerPC architecture 
requirements. The concept behind the use of the lwarx and stwex. instructions is that a 
processor may load a semaphore from memory, compute a result based on the value of the 
semaphore, and conditionally store it back to the same location (only if that location has 
not been modified since it was first read), and determine if the store was successful. The 
conditional store is performed based upon the existence of a reservation established by the 
preceding lwarx instruction. If the reservation exists when the store is executed, the store 
is performed and a bit is set in the CR. If the reservation does not exist when the store is 
executed, the target memory location is not modified and a bit is cleared in the CR. 


If the store was successful, the sequence of instructions from the read of the semaphore to 
the store that updated the semaphore appear to have been executed atomically (that is, no 
other processor or mechanism modified the semaphore location between the read and the 
update), thus providing the equivalent of a real atomic operation. However, in reality, other 
processors may have read from the location during this operation. In the MPC850, the 
reservations are made on behalf of aligned 16-byte sections of the memory address space. 
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The Iwarx and stwex. instructions require the EA to be aligned. Exception handling 
software should not attempt to emulate a misaligned Ilwarx or stwex. instruction, because 
there is no correct way to define the address associated with the reservation. 





In general, the lwarx and stwex. instructions should be used only in system programs, 
which can be invoked by application programs as needed. 


At most, one reservation exists simultaneously on any processor. The address associated 
with the reservation can be changed by a subsequent Iwarx instruction. The conditional 
store 1s performed based upon the existence of a reservation established by the preceding 
Iwarx, regardless of whether the address generated by the lwarx matches that generated by 
the stwex. instruction. A reservation held by the processor is cleared by one of the 
following: 


e Executing an stwex. instruction to any address 


e Attempt by another device to modify a location in the reservation granularity 
(16 bytes) 


In write-through mode, lwarx and stwex. do not cause a DSI exception. 


The sync instruction guarantees that previously fetched instructions finish before any 
subsequent instructions are dispatched to the execution units. It does not affect fetching; 
instructions continue to be fetched up to the instruction queue limit, but dispatch stalls until 
the sync finishes. 


The original purpose of the syne instruction was to synchronize coherent memory with 
other processors in a multiprocessor system; it makes sure that memory as seen by one 
processor is the same as memory seen by the other processors, and broadcasts a special 
signal to signal that the action is taking place. However, the MPC850 does not support this 
enforcement of coherency in a multiprocessor system, and it broadcasts no special 
synchronization signal. The MPC850 simply expects other processors not to rely on 
coherency of memory that it has cached in copy-back mode. 


The only case where a sync instruction would be useful in an MPC8xx system 1s if software 
modified the page table structure associated with the SMMU only and needed to guarantee 
that data accesses after that instruction would be executed in the new data context. 
However, this is an unexpected special case; isyne would work here, but the pipeline need 
not be flushed in this case, so sync is sufficient. 


5.2.5 PowerPC VEA Instructions 


The PowerPC VEA describes the semantics of the memory model that can be assumed by 
software processes, and includes descriptions of the cache model, cache control 
instructions, address aliasing, and other related issues. 


Sasa 








MOTOROLA Chapter 5. MPC850 Instruction Set 5-19 





Part ll. PowerPC Microprocessor Module 


5.2.5.1 Processor Control Instructions 


In addition to the move to condition register instructions specified by the UISA, the VEA 
defines the Move from Time Base (mftb) instruction for reading the contents of the time 
base register. The mftb is a user-level instruction, it is shown in Table 5-17. 


Simplified mnemonics are provided for the mftb instruction so it can be coded with the 
TBR name as part of the mnemonic rather than requiring it to be coded as an operand. The 
mftb instruction serves as both a basic and simplified mnemonic. Assemblers recognize an 
mftb mnemonic with two operands as the basic form, and an mftb mnemonic with one 
operand as the simplified form. Simplified mnemonics are also provided for Move from 
Time Base Upper (mftbu), which is a variant of the mftb instruction rather than of mfspr. 
The MPC850 ignores the extended opcode differences between mftb and mfspr by 
ignoring bit 25 of both instructions and treating them both identically. For more information 
refer to Appendix F, “Simplified Mnemonics,” in The Programming Environments Manual. 


Table 5-17. Move from Time Base instruction 


ee 
Move from Time Base mite | rD, TBR 


5.2.5.2 Memory Synchronization Instructions—VEA 


Memory synchronization instructions control the order in which memory operations are 
completed with respect to asynchronous events, and the order in which memory operations 
are seen by other processors or memory access mechanisms. See Chapter 7, “Instruction 
and Data Caches,’ for additional information about these instructions and about related 
aspects of memory synchronization. 

















Table 5-18 lists the VEA memory synchronization instructions for the MPC850. 


Table 5-18. Memory Synchronization Instructions—VEA 


Enforce In-Order oe During execution, the LSU waits for previous accesses to terminate before — 


Execution of I/O beginning accesses associated with load/store instructions after an eieio. 
5.2.5.2.1 eieio Behavior 


The purpose of eieio is to prevent loads and stores from executing speculatively when 
appropriate, This might be desirable for a FIFO, where performing a read or write changes 
the FIFO's data. This should not be done unless it is certain that the instruction will be 
completed and not cancelled. 
























Instruction 
Synchronize 


The isync instruction waits for all previous instructions to complete and 
discards any prefetched instructions, causing subsequent instructions to be 
refetched from memory. 


The same function as eieio can be accomplished by defining a memory space as having the 
guarded attribute in the MMU, in which case, the eieio instruction is redundant. 
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However, eieio could be useful in the rare event that a region where speculative accesses 
are not allowed lies in the middle of a non-guarded page. 


5.2.5.2.2 isync Behavior 

The isync instruction is context synchronizing, which guarantees that all of effects of 
previous instructions are in place and any instructions in the instruction queue are flushed 
(which means all instructions that were in the instruction queue need to be refetched). In 
the MPC850, fetching an isynce instruction causes fetch to stall, so that no refetching is 
required. On the MPC850, writes to SPRs and MSR that effect context are automatically 
context synchronizing, so an isync is not required before these instructions. However, isyne 
should be inserted after these instructions to ensure that instructions are fetched in the 
appropriate context. Furthermore, load/store instructions that update the MMU page tables 
in external memory should both be preceded and followed by an isync, to ensure that 
instructions before and after such instructions are fetched and completed in the appropriate 
context. 


5.2.5.3 Memory Control Instructions—VEA 


Memory control instructions include the following types: 


e Cache management instructions 
e Translation lookaside buffer (TLB) management instructions 


This section describes the user-level cache management instructions defined by the VEA. 
See Section 5.2.6.3, “Memory Control Instructilons—OEA,”’ for information about 
supervisor-level cache and translation lookaside buffer management instructions. 


The instructions listed in Table 5-19 provide user-level programs the ability to manage 
on-chip caches. 


As with other memory-related instructions, the effect of the cache management instructions 
on memory are weakly ordered. If the programmer needs to ensure that cache or other 
instructions have been performed with respect to all other processors and system 
mechanisms, a sync instruction must be placed in the program following those instructions. 


Note that when data address translation is disabled (MSR[DR] = 0), the Data Cache Block 
Set to Zero (dcbz) instruction allocates a cache block in the cache and may not verify that 
the physical address is valid. If a cache block is created for an invalid physical address, a 
machine check condition may result when an attempt is made to write that cache block back 
to memory. The cache block could be written back as a result of the execution of an 
instruction that causes a cache miss and the invalid addressed cache block is the target for 
replacement or a Data Cache Block Store (debst) instruction. 
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Table 5-19 lists the cache instructions that are accessible to user-level programs. 


Table 5-19. User-Level Cache Instructions 


| Syntax | MPC850 Notes 


The appropriate cache block is checked for a hit. If it is a miss, 
the instruction is treated as a regular miss, except that bus 
error does not cause an exception. If no error occurs, the cache 
is updated. 






Data Cache Block Touch 

















Data Cache Block Touch for 
Store 








Data Cache Block Set to Zero Kdebz 


Executes as defined in the VEA. | 
A,rB Executes as defined in the VEA. | 


The MMU translates the EA and the associated instruction 
cache block is invalidated if hit. 


5.2.6 PowerPC OEA Instructions 


The PowerPC OEA includes the structure of the memory management model, 
supervisor-level registers, and the exception model. 


Data Cache Block Store 
Data Cache Block Flush 


Instruction Cache Block 
Invalidate 





5.2.6.1 System Linkage Instructions 

This section describes system linkage instructions (see Table 5-20). The se instruction is a 
user-level instruction that permits a user program to call on the system to perform a service 
and causes the processor to take an exception. The Return from Interrupt (rfi) instruction is 
a supervisor-level instruction that is useful for returning from an exception handler. 


Table 5-20. System Linkage Instructions 


Return from Interrupt 





5.2.6.2 Processor Control Instructions—OEA 

Processor control instructions are used to read from and write to the condition register 
(CR), machine state register (MSR), and special-purpose registers (SPRs), and to read from 
the time base register (TBU or TBL). 


5.2.6.2.1 Move to/from Machine State Register Instructions 


Table 5-15 lists the instructions provided by the MPC850 for reading from or writing to the 
MSR. 


Table 5-21. Move to/from Machine State Register Instructions 


Move to Machine State Register 


Move from Machine State Register 


5-22 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 





Part Il. PowerPC Microprocessor Module 


5.2.6.2.2 Move to/from Special-Purpose Register Instructions 

Simplified mnemonics are provided for the mtspr and mfspr instructions so they can be 
coded with the SPR name as part of the mnemonic rather than as a numeric operand. See 
Appendix F, “Simplified Mnemonics,” in The Programming Environments Manual for 
simplified mnemonic examples. The mtspr and mfspr instructions are shown in 
Table 5-22. 


Table 5-22. Move to/from Special-Purpose Register Instructions 


Move from Special-Purpose Register 





Move to Special-Purpose Register | omtspr | SPR,rS 


rD,SPR 


For mtspr and mfspr instructions, the SPR number coded in assembly language does not 
appear directly as a 10-bit binary number in the instruction. The number coded is split into 
two 5-bit halves that are reversed in the instruction encoding, with the high-order 5 bits 
appearing in bits 16—20 of the instruction encoding and the low-order 5 bits in bits 11-15. 


If the SPR field contains a value not shown in Section 4.1, “MPC850 Register 
Implementation,’ either the program exception handler is invoked or results are boundedly 
undefined. 


5.2.6.3 Memory Control Instructions—OEA 

This section describes memory control instructions, which include the following types: 
e Cache management instructions 
e TLB management instructions 


5.2.6.3.1 Supervisor-Level Cache Management Instruction 


Table 5-23 describes the only supervisor-level cache management instruction. See 
Section 5.2.5.3, “Memory Control Instructions—VEA,’ for a description of cache 
instructions that provide user-level programs the ability to manage on-chip caches. 


Table 5-23. Supervisor-Level Cache Management Instruction 


Data Cache Block Invalidate rA, rB | The MMU translates the EA and the associated data cache 
block is invalidated if hit. 


5.2.6.3.2 Translation Lookaside Buffer Management Instructions 


Refer to Chapter 8, “Memory Management Unit,” for more information about the TLB 
operations for the MPC850. Table 5-24 lists the TLB instructions. 
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Table 5-24. Translation Lookaside Buffer Management Instructions 


TLB Invalidate All tibia 


TLB Synchronize . tlbsync pe | Has no effect. Treated like a no-op. 


Because the presence and exact semantics of the TLB management instructions is 
implementation-dependent, system software should incorporate uses of the instructions 
into subroutines to maximize compatibility with programs written for other processors. 















5.2.7 Recommended Simplified Mnemonics 


To simplify assembly language programs, a set of simplified mnemonics is provided for 
some of the most frequently used operations (such as no-op, load immediate, load address, 
move register, and complement register). PowerPC compliant assemblers provide the 
simplified mnemonics listed in “Recommended Simplified Mnemonics” in Appendix F, 
“Simplified Mnemonics,” in The Programming Environments Manual and listed with 
some of the instruction descriptions in this chapter. Programs written to be portable across 
the various assemblers for the PowerPC architecture should not assume the existence of 
mnemonics not described in this document. 


For a complete list of simplified mnemonics, see Appendix F, “Simplified Mnemonics,” in 
The Programming Environments Manual. 
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Chapter 6 
Exceptions 


Core exceptions can be generated when an exception condition occurs. Exception sources 
in the MPC850 include the following: 


e External interrupt request 

e Certain memory access conditions (protection faults and bus errors) 

e Internal errors, such as an attempt to execute an unimplemented opcode 
e Trap instructions 

e Internal exceptions (breakpoints and debug counter’s expiration) 


Exception handling 1s transparent to user software and uses the same mechanism to handle 
all types of exceptions. When an exception is taken, control is transferred to an exception 
handler located at an offset defined for the type of exception encountered. The exception 
prefix bit, MSR[IP], determines whether this base address for the vector table resides at 
Ox000n_nnnn (IP = 0) or OXFFFn_nnnn (IP = 1). Exceptions are handled in supervisor 
mode. 


After the exception has been handled, the handler returns control to the interrupting 
program. As specified in the PowerPC Family: The Programming Environments for 32-Bit 
Implementations, the core implements a precise exception model. This means that when an 
exception is taken, the following conditions are met: 


e Subsequent instructions in the program flow are discarded. 
e Previous instructions finish and write back their results. 


e The address of the faulting instruction is saved in SRRO and the machine state of the 
interrupted process is saved in SRR1. 


e When the exception is taken, the instruction causing the exception might not have 
started executing, could be partially executed, or has completed, depending on the 
exception and instruction types. See Table 6-20. 


For more information, see Section 6.1.4, “Implementing the Precise Exception Model.” 
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6.1 Exceptions 


The OEA defines a set of exceptions for PowerPC processors, some of which are optional. 
The following sections describe exceptions implemented on the MPC850. Those defined 
by the OFA are described in Section 6.1.2, “PowerPC-Defined Exceptions.” Section 6.1.3, 
“Implementation-Specific Exceptions,’ describes implementation-specific exceptions. 


All exceptions associated with memory are implemented as precise, which means that a 
load/store instruction is not complete until all possible error indications are sampled from 

the load/store bus. This also implies that a store or nonspeculative load instruction is not 
issued to the load/store bus until all previous instructions have completed. If a late error 
occurs, a store cycle (or a nonspeculative load cycle) can be issued and aborted. 


In each exception handler, when registers SRRO and SRR1 are saved, MSR[RI] can be set. 


Table 6-1 defines the offset value by exception type and the sections that follow describe 
each exception in detail. Note that the base is determined by the setting of MSR[IP]. 


Table 6-1. Offset of First Instruction by Exception Type | | 


ee 


| OEA-Defined Exceptions 
0x00100 | System reset interrupt See Section 6.1.2.1, “System Reset Interrupt (0x00100).” 


0x00200 | Machine check interrupt See Section 6.1.2.2, “Machine Check Interrupt (0x00200).” 






















0x00300 | DSI A DSI exception is never generated by hardware, but software may 
branch to this location because of an data TLB error or miss exception. 


See Section 6.1.2.3, “DSI Exception (0x00300).” 





0x00400 | ISI An ISI exception is never generated by the hardware, but software may 
branch to this location because of an implementation-specific instruction 


TLB error exception. See Section 6.1.2.4, “ISI Exception (0x00400).” 


0x00500 | External Interrupt See Section 6.1.2.5, “External Interrupt Exception (0x00500).” 


0x00600 |; Alignment Alignment exceptions result from the following conditions: 
+ The operand of a load/store multiple is not word-aligned. 
* The operand of a lwarx or stwex. is not word-aligned. 
* The operand of a load/store instruction is not naturally aligned when 
MSR[LE] = 1. | 
- Trying to execute a multiple/string instruction when MSRI[LE] = 1. 
See Section 6.1.2.3, “DSI Exception (0x00300).” 















0x00700 | Program The MPC850 cannot generate a floating-point exception type exception. 
See Section 6.1.2.7, “Program Exception (0x00700).” An 
implementation-specific software emulation exception is generated 
instead of an illegal instruction type program exception. A privileged 
instruction program exception is generated for an on-core valid SPR field 
or any SPR encoded as an external SPR if SPR[O] = 1 and MSR[PR] = 
1, as well as for attempts to execute supervisor-level instructions when 


MSRI[PR] = 1. See Table 6-11. 
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Table 6-1. Offset of First Instruction by Exception Type (Continued) 


Coe [in [an 


0x00800 | Floating-point unavailable The MPC850 cannot generate a floating-point exception. Attempting to 
| execute a floating-point instruction causes an implementation-specific 
software emulation exception (see Section 6.1.3.1, “Software Emulation 






Exception (0x01000)”) regardless of the setting of MSR[FP]. 


0x00900 See Section 6.1.2.8, “Decrementer Exception (0x00900).” 


OxOOA00— } Reserved _— 
0x00B00 


0Ox00CO0 | System call See Section 6.1.2.9, “System Call Exception (Ox00CO00).” 
0x00D00 See Section 6.1.2.10, “Trace Exception (OxOODO0).” 
OxOOE00 | Floating-point assist See Section 6.1.2.11, “Floating-Point Assist Exception.” 





Implementation-Specific Exceptions 
0x01000 | Software emulation See Section 6.1.3.1, “Software Emulation Exception (0x01000).” 
0x01100 j Instruction TLB miss See Section 6.1.3.2, “Instruction TLB Miss Exception (0x01 100).” 


0x01200 | Data TLB miss See Section 6.1.3.3, “Data TLB Miss Exception (0x01200).” 


Instruction TLB error See Section 6.1.3.4, “Instruction TLB Error Exception (0x01300).” 


Data TLB error See Section 6.1.3.5, “Data TLB Error Exception (0x014000).” 


0x01300 
0x01400 


0x01500- 
0x01B00 


Reserved 


0x01C00 | Data breakpoint 


See Section 6.1.3.6, “Debug Exceptions (0x01C00—0x01 FO00).” 


0x01D00 | Instruction breakpoint 


0x01E00 | Peripheral breakpoint 





0x01FO0 | Nonmaskable development port 


6.1.1 Exception Ordering 


There are two types of exceptions. Instruction-related exceptions (synchronous exceptions) 
and asynchronous exceptions (interrupts). 


Synchronous exceptions are detected while the core is processing the instruction. These 
exceptions are handled in strict program order and cannot be nested. A single instruction 
may generate multiple exceptions; however, any subsequent exceptions are not detected 
until the first exception is handled and control is returned to the program. 


If more than one instruction in the pipeline causes an exception or if one instructions causes 
multiple exceptions, the first exception in program order is taken first. Subsequent | 
instructions are flushed and additional instruction-related exceptions are handled in order. | 


Typically, asynchronous exceptions are generated by signals or by other hardware 
conditions. Table 6-2 lists the instruction-related exceptions in the order of detection within 
the instruction processing. 





SISSIES CRITI OIE 
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Table 6-2. Instruction-Related Exception Detection Order 


Trace bit asserted ' 
ITLB miss 2 Instruction MMU TLB miss 


Software emulation exception 2 


Debug L- breakpoint 2 Match detection 





' The trace mechanism is implemented by letting one instruction go as if no trace is enabled and trapping the second 
instruction. This, of course, refers to this second instruction. 

2 MPC850-specific exception. 

3 Exclusive for any one instruction. 


When multiple exception conditions exist, only the highest priority exception is taken, as 
shown in Table 6-3. 


Table 6-3. Exception Priority 


a 







Peripheral breakpoint request or development port maskable interrupt | Breakpoint signal from any peripheral 
External interrupt (masked if MSR[EE] = 0) Signal from the interrupt controller 
|e | Decrementer interrupt (masked if MSR[EE] = 0) | Decrementer request 


6.1.2 PowerPC-Defined Exceptions 


The following sections describe the exceptions as they are defined by the OEA, and 
describes how they are implemented on the MPC850. 
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6.1.2.1 System Reset Interrupt (0x00100) 


A system reset interrupt occurs when IRQO is asserted. When the exception is taken, 
processing begins at offset Ox00100. A hard or soft reset also causes program execution to 
begin fetching at 0x00100 after the associated reset actions. Table 6-4 shows register 


settings. FG 


Table 6-4. Register Settings after a System Reset Interrupt Exception 


ee fm 


SRRO Set to the EA of the next instruction of the interrupted process. 


SRR1 Saves the machine status prior to exceptions and to restore status when an rfi instruction is executed. 
14 0 
10-15 0 
Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSR[RI]. 


MSR No change 
No change 
Value of MSRIILE] of the interrupted process. 
Others 0 


6.1.2.2 Machine Check Interrupt (0x00200) 

A machine check interrupt indication is received from the U bus in response to an address 
or data tenure. It is typically caused by an access for which the address does not exist or a 
data error occurs. 





As defined in the OEA, machine check interrupts are enabled when MSR[ME] = 1. If 
MSR[ME] = 0 and a machine check condition is detected, the processor enters the 
checkstop state. The behavior of the core in checkstop state is dependent on the working 
mode as defined in Section 36.3.1.1, “Debug Mode Enable vs. Debug Mode Disable.’ 
When debug mode is enabled, debug mode is entered instead of checkstop state. When 
debug mode is disabled, instruction processing is suspended and cannot be restarted 
without resetting the core. 


An indication that can generate an automatic reset in this condition is sent to the system 
interface unit. See Chapter 10, “System Interface Unit,’ for more details. If MSR[ME]= 1, 
the machine check interrupt is taken. If SRR1[30] = 1, the interrupt is recoverable. 
Instruction fetching begins at offset 0x00200 and the registers are set as shown in Table 6-5. 
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Table 6-5. Register Settings after a Machine Check Interrupt Exception 


a 
ISRRO | Set to the EA of the instruction that caused the exception. | | 


1 1 for instruction fetch-related errors; 0 for load/store-related errors. 

2-4 0 

10-15 0 oe > 3 

Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSRI[RI]. 


MSR IP No change 
ME 0 
LE Copied from the ILE setting of the interrupted process 
Others 0 


DSISR Set when the load/store bus is used: 
0-14 0 
15-16 Set to bits 29-30 of the instruction if X-form instruction and to ObOO if D-form. 
17 Set to bit 25 of the instruction if X-form instruction and to bit 5 if D-form. 


18-21 Set to bits 21-24 of the instruction if X-form instruction and to bits 1-4 if D-form. 
22-31 Set to bits 6-15 of the instruction. 


When the load/store bus is used, DAR holds the EA of the data access that caused the exception. 


6.1.2.3 DSI Exception (0x00300) 


DSI exceptions are never generated by the hardware. Software may branch to this location 
as a result of either implementation specific DTLB error interrupt or implementation 
specific STLB miss interrupt. 


6.1.2.4 ISI Exception (0x00400) 


ISI exceptions is never generated by the hardware. The software may branch to this location 
as a result of an implementation-specific ITLB error interrupt. 





6.1.2.5 External Interrupt Exception (0x00500) 


In the MPC850 the external interrupt is generated by the on-chip interrupt controller. It is 
software acknowledged and maskable by MSR[EE], which hardware clears automatically 
to disable external interrupts when any exception is taken. 


When an external interrupt is detected, program execution continues until all previous 
instructions retire from the completion queue and the exception is assigned to the 
instruction last entry in the completion queue (at point B in Table 6-19.) However, the 
following conditions must be met before the instruction at the end of the queue can retire. 


e The instruction must be completed without exception 


e The instruction must either be a mtspr, mtmsr, rfi, a memory reference, or a 
memory- or cache-control instruction. 


Instructions not fitting these criteria are discarded along with any execution results. After 
the exception handler completes, execution resumes with the first instruction that was 
discarded. If all the instructions in the completion queue were allowed to complete, 
execution at the end of the exception handler resumes with the next instruction. External 
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exception latency depends on the time required to reference memory. The measurement is 
equal to the time taken for one of the following three events, in addition to the interval from 
B to E as shown in Table 6-19. 

e Longest load/store multiple/string instruction used 

e or, one bus cycle for aligned access 

e or, two bus cycles for unaligned access 


System-level exception latency can be longer than the interval from B to E. If an instruction 
ahead of the exception-causing instruction also generates an exception, that exception is 
recognized first. If it is important to minimize exception latency, exception handlers should 
save the machine context and reenable exceptions as quickly as possible so pending 
external exceptions are handled quickly. 


Register settings for the external interrupt exception are shown in Table 6-6. 


Table 6-6. Register Settings after an External Interrupt 
Setting Description 
SRRO Set to the effective address of the instruction that the processor would have attempted to execute next if 
no interrupt conditions were present. 


SRR1 Loaded with equivalent bits from the MSR 
ee Cleared 
5-9 Loaded with equivalent bits from the MSR 
10-15 Cleared 
16-31 Loaded with equivalent bits from the MSR 
Note that depending on the implementation, reserved bits in the MSR may not be copied to SRR1. 


6.1.2.6 Alignment Exception (0x00600) 


This section describes conditions that can cause alignment exceptions in the processor. 
Similar to DSI exceptions, alignment exceptions use SRRO and SRR1I to save the machine 
state and DSISR to determine the source of the exception. An alignment exception occurs 
when no higher priority exception exists and the implementation cannot perform a memory 
access for one of the following reasons: 













LE Set to value of ILE 





e The operand of Imw, stmw, Iwarx, or stwex. is not aligned. 


¢ The instruction is Imw, stmw, Iswi, lswx, stswi, or stswx and the processor is in 
little-endian mode. 


e An unaligned load or store in little-endian mode. 
For Imw, stmw, Iswi, lswx, stswi, and stswx instructions in little-endian mode, an 


alignment exception always occurs. For Imw and stmw instructions with an operand that is 
not aligned in big-endian mode, and for Iwarx and stwex. with an operand that is not 
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aligned in either endian mode, an implementation may yield boundedly-undefined results 
instead of causing an alignment exception. For all other cases listed above, an 
implementation may execute the instruction correctly instead of causing an alignment 
exception. 


The register settings for alignment exceptions are shown in Table 6-7. 


Table 6-7. Register Settings after an Alignment Exception 


Setting Description 
Set to the effective address of the instruction that caused the exception. 


SRR1 Loaded with equivalent bits from the MSR 


























on Cleared 
5~9 Loaded with equivalent bits from the MSR 
10-15 Cleared 
16-31 Loaded with equivalent bits from the MSR 


Note that depending on the implementation, reserved bits in the MSR may not be copied to SRR1. 


LE Set to value of ILE 








0-14 Cleared 

15-16 For instructions that use register indirect with index addressing —set to bits 29-30 of the 
instruction encoding. 
For instructions that use register indirect with immediate index addressing—cleared 

“117 For instructions that use register indirect with index addressing—set to bit 25 of the instruction 
encoding. 
For instructions that use register indirect with immediate index addressing— set to bit 5 of the 
instruction encoding. 

18-21 For instructions that use register indirect with index addressing —set to bits 21—24 of the 
instruction encoding. 
For instructions that use register indirect with immediate index addressing—set to bits 1—4 of the 
instruction encoding. 

22-26 Set to bits 6-10 (identifying either the source or destination) of the instruction encoding. 
Undefined for debz. 

27-31 Set to bits 11-15 of the instruction encoding (rA) for update-form instructions 

Set to either bits 11-15 of the instruction encoding or to any register number not in the range of 

registers loaded by a valid form instruction for Imw, Iswi, and Iswx instructions. Otherwise 

undefined. 


If there is no corresponding instruction, no alternative value can be specified. 


Set to the EA of the data access as computed by the instruction causing the alignment exception. 


The architecture does not support the use of a misaligned EA by load/store with reservation 
instructions. If one of these instructions specifies a misaligned EA, the exception handler 
should not emulate the instruction but should treat the occurrence as a programming error. 





6.1.2.6.1 Integer Alignment Exceptions 

Operations that are not naturally aligned may suffer performance degradation, depending 
on the processor design, the type of operation, the boundaries crossed, and the mode that 
the processor is in during execution. More specifically, these operations may either cause 





6-8 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part ll. PowerPC Microprocessor Module 


an alignment exception or they may cause the processor to break the memory access into 
multiple, smaller accesses with respect to the cache and the memory subsystem. 


6.1.2.7 Program Exception (0x00700) 

A program exception occurs when no higher priority exception exists and one or more of 
the following exception conditions, which correspond to bit settings in SRR1, occur during 
execution of an instruction: 





e An Iswx instruction for which rA or rB is in the range of registers to be loaded (may 
cause results that are boundedly undefined) | 

e Privileged instruction— A privileged instruction type program exception is 
generated when the execution of a privileged instruction is attempted and the 
processor is operating in user mode (MSR[PR] is set). It is also generated for mtspr 
or mfspr instructions that have an invalid SPR field that contain one of the defined 
values having spr[{O] = 1 and if MSR[PR] = 1. Some implementations may also 
generate a privileged instruction program exception if a specified SPR field (for a 
move to/from SPR instruction) is not defined for a particular implementation, but 
spr[O] = 1; in this case, the implementation may cause either a privileged instruction 
program exception, or an illegal instruction program exception may occur instead. 


e Trap—A trap program exception is generated when any of the conditions specified 
in a trap instruction is met. Trap instructions are described in Section 5.2.4.4, “Trap 
Instructions.” 


The register settings when a program exception is taken are shown in Table 6-8. 


Table 6-8. Register Settings after a Program Exception 


Setting Description i 
SRRO Set to the EA of the instruction that causes the exception. 


SRR1 Loaded with equivalent bits from the MSR 
ae Cleared 
Loaded with equivalent bits from the MSR 
Cleared 
Note that only one of bits 11-14 of SRR1 can be set at a time. 
Cleared. 
Set for an illegal instruction program exception; otherwise cleared. 


Set for a privileged instruction program exception; otherwise cleared. 

Set for a trap program exception; otherwise cleared. 

Cleared if SRRO contains the address of the instruction causing the exception, and set if 
SRRO contains the address of a subsequent instruction. 

Loaded with equivalent bits from the MSR 


Note that depending on the implementation, reserved bits in the MSR may not be copied to SRR1. 





LE Set to value of ILE 





When a program exception is taken, instruction execution resumes at offset 0x00700 from 
the physical base address indicated by MSR[IP]. 
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6.1.2.8 Decrementer Exception (0x00900) 


A decrementer exception occurs when no higher priority exception exists, a decrementer 
exception condition occurs (for example, the decrementer register has completed 
decremented), and MSR[EE] = |. The decrementer register counts down, causing an 
exception request when it passes through zero. A decrementer exception request remains 
pending until the decrementer exception is taken and then it is cancelled. The decrementer 
implementation meets the following requirements: 


¢ The counters for the decrementer and the time-base counter are driven by the same 
fundamental time base. 


¢ Loading a GPR from the decrementer does not affect the decrementer. 
¢ Storing a GPR value to DEC replaces the DEC contents with the value in the GPR. 


¢ Whenever bit 0 of the decrementer changes from 0 to 1, a decrementer exception 
request is signaled. If multiple decrementer exception requests are received before 
the first can be reported, only one exception is reported. 


¢ If the decrementer is altered by software and if bit 0 is changed from 0 to I, an 
exception request is signaled. 


The register settings for the decrementer exception are shown in Table 6-9. 


Table 6-9. Register Settings after a Decrementer Exception | 


Setting peer upuen 
SRRO Set to the effective address of the instruction that the processor would have attempted to execute next if 
no exception conditions were present. | 


SRR1 S Loaded with equivalent bits from the MSR 
Cleared 
a Loaded with equivalent bits from the MSR 
10-15 Cleared 
16-31 Loaded with equivalent bits from the MSR 
Note that depending on the implementation, reserved bits in the MSR may not be copied to SRR1. 


When a decrementer exception is taken, instruction execution resumes at offset 0x00900 
from the physical base address indicated by MSR[IP]. 


6.1.2.9 System Call Exception (0x00CO00) 

A system call exception occurs when a System Call (sc) instruction is executed. The 
effective address of the instruction following the sc instruction is placed into SRRO. MSR 
bits are saved in SRR1, as shown in Table 6-10. Then a system call exception is generated. 











LE Set to value of ILE 
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The system call exception causes the next instruction to be fetched from offset OxO0COO 
from the physical base address indicated by the new setting of MSR[IP]. As with most other 
exceptions, this exception is context-synchronizing. Refer to Section 5.2.2.3.1, “Context 
Synchronization,” regarding actions performed by a context-synchronizing operation. 


Table 6-10. Register Settings after a System Call Exception 


Setting Description 
SRRO Set to the effective address of the instruction following the System Call instruction 


SRR1 0 Loaded with equivalent bits from the MSR 
1-4 Cleared 
5-9 Loaded with equivalent bits from the MSR 
10-15 Cleared 
16-31 Loaded with equivalent bits from the MSR 
Note that depending on the implementation, reserved bits in the MSR may not be copied to SRR1. 


LE Set to value of ILE 


When a system call exception is taken, instruction execution resumes at offset OxOOCOO 
from the physical base address indicated by MSR[IP]. 


6.1.2.10 Trace Exception (0x00D00) 


A trace exception occurs if MSR[SE] = 1 and any instruction except rfi is successfully 
completed or if MSR[BE] = | and a branch is completed. Notice that the trace exception 
does not occur after an instruction that causes an exception. The monitor/debugger software 
must change the vectors of other possible exception addresses to single-step these 
instructions. If this is unacceptable, other debug features can be used. See Chapter 36, 
“System Development and Debugging,’ for more information. Table 6-11 shows register 
settings for trace exceptions. 


SRRO Set to the EA of the instruction following the executed instruction. 


SRR1 14 0 
10-15 0 
Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSR[RI]. 


MSR No change 
No change 
Copied from the ILE setting of the interrupted process 
Others 0 


Execution resumes at offset OxOODOO0 from the base address indicated by MSR[IP]. 





Table 6-11. Register Settings after a Trace Exception 
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6.1.2.11 Floating-Point Assist Exception 


The floating-point assist exception is not generated by the MPC850. Attempting to execute 
a floating-point causes an instruction implementation-specific software emulation 
exception. 


6.1.3 Implementation-Specific Exceptions 


The following sections describe the MPC850’s implementation-specific exceptions. 


6.1.3.1 Software Emulation Exception (0x01000) 


An software emulation exception occurs as a result of one of the following conditions: 
e When executing any unimplemented instruction, including all illegal and 
unimplemented optional and floating-point instructions. 


; When executing a mtspr or mfspr that specifies an on-core unimplemented register, 
regardless of SPR[O]. 


e¢ When executing a mtspr or mfspr that specifies an off-core unimplemented register 
and SPR[0] = 0 or MSR[PR] = 0 (no program exception condition). 


In addition, the following registers are set: 


Table 6-12. Register Settings after a Software Emulation Exception 


a 
SRRO Set to the EA of the instruction that caused the exception. 


SRRI1 
ee 5 
Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSRI[RI]. 





No change 

No change 

Copied from the ILE setting of the interrupted process 
Others 0 


Execution resumes at offset 0Ox01000 from the base address indicated by MSR[IP]. 


6.1.3.2 Instruction TLB Miss Exception (0x01100) 

This type of exception occurs if MSR[IR] = 1 and an attempt is made to fetch an instruction 
from a page whose effective page number cannot be translated by TLB. The following 
registers are set: 
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Table 6-13. Register Settings after an Instruction TLB Miss Exception 


Cs 


SRRO Set to the EA of the instruction that caused the exception. 


SRR1 0-3 

4 

10 1 

11-15 0 

Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSRI[RI]. 
MSR 


No change 

No change 

Copied from the ILE setting of the interrupted process 
Others 0 





Some instruction TLB registers are set to the values described in Chapter 8, “Memory 
Management Unit.” Execution resumes at offset 0x01100 from the base address indicated 
by MSR[IP]. 


6.1.3.3 Data TLB Miss Exception (0x01200) 


This type of exception occurs when MSR[DR] = 1 and an attempt is made to access a page 
whose effective page number cannot be translated by TLB. The following registers are set: 


Table 6-14. Register Settings after a Data TLB Miss Exception 


Fe ences ee 
SRRO Set to the EA of the instruction that caused the exception. 


SRR1 
eae : 
Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSR[RI]. 


No change 

No change 

Copied from the ILE setting of the interrupted process 
Others 0 


Some instruction TLB registers are set to the values described in Chapter 8, “Memory 
Management Unit.” Execution resumes at offset 0x01200 from the base address indicated 
by MSR[IP]. 





6.1.3.4 Instruction TLB Error Exception (0x01300) 


This type of exception occurs as a result of one of the following conditions if MSR[IR]= 1: 


¢ The EA cannot be translated. Either the segment or page valid bit of this page is 
cleared in the translation table. Note that although the MPC850 does not implement 
segment registers as they are defined by the OEA, the concept of segment is retained 
as the memory space accessible to the level-one table descriptors. 


e The fetch access violates memory protection. 


e The fetch access is to guarded memory. 
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The following registers are set: 


Table 6-15. Register Settings after an Instruction TLB Error Exception 


A 
SRRO Set to the EA of the instruction that caused the exception. 


Note that only one of bits 1, 3, and 4 will be set. 

1 1 if the translation of an attempted access is not in the translation tables. Otherwise 0 
2 0 : 

3 1 if the fetch access was to guarded memory when MSR[IR] = 1. Otherwise 0 


1 if the access is not permitted by the protection mechanism; otherwise 0. 
11-15 0 
Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSR[RI]. 


IP No change 

ME No change 

LE Copied from the ILE setting of the interrupted process 
Others 0 





Some instruction TLB registers are set to a value described in Chapter 8, “Memory 
Management Unit.” Execution resumes at offset 0x01300 from the base address indicated 


by MSR[IP]. 
6.1.3.5 Data TLB Error Exception (0x014000) 


This type of exception occurs as a result of one of the following conditions: 


¢ NoEA of aload, store, icbi, dcbz, dcbst, dcbf or dcbi instruction can be translated 
(either the segment or page valid bit of this page is cleared in the translation table). 


¢ The access violates memory protection. 


e An attempt was made to write to a page with a cleared change bit. 


The following registers are set: 


Table 6-16. Register Settings after a Data TLB Error Exception 


a 
SRRO Set to the EA of the instruction that caused the exception. 


SRR1 1-4. 0 
10-150 
Other Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSR[RI]. 


MSR IP No change 
ME  Nochange 
LE Copied from the ILE setting of the interrupted process 
Others 0 | 
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Table 6-16. Register Settings after a Data TLB Error Exception (Continued) 


a 


DSISR 0 
Set if the translation of an attempted access is not found in the translation tables. Otherwise, cleared 
0 


Set if the memory access is not permitted by the protection mechanism; otherwise cleared 
0 


1 for a store operation; 0 for a load operation. 
7-31 0 


Set to the EA of the data access that caused the exception. | 


Some instruction TLB registers are set to the values described in Chapter 8, “Memory 
Management Unit.” Execution resumes at offset 0x01400 from the base address indicated 
by MSR[IP]. 


6.1.3.6 Debug Exceptions (0x01C00-—0x01F00) 


A debug exception occurs in response to one of the following conditions: 





e When there is an internal breakpoint match (for more details, see Section 36.2, 
‘“Watchpoints and Breakpoints Support’). 


¢ When a peripheral breakpoint request is presented to the exception mechanism. 


e When the development port request is presented to the exception mechanism. 


The following registers are set: 


Table 6-17. Register Settings after a Debug Exception 


eel 


SRRO For |-breakpoints, set to the EA of the instruction that caused the exception. For L-breakpoint, set to the EA 
of the instruction after the one that caused the exception. For development port maskable request or a 
peripheral breakpoint, set to the EA of the instruction that the processor would have executed next if no 
exception conditions were present. If the development port request is asserted at reset, the value of SRRO 
is undefined. 

SRR1 
MSR 
Others 0 
BAR For L-bus breakpoint conditions. Set to the EA of the data access as computed by the instruction that 
caused the exception. 
DSISR For L-bus breakpoint conditions. Do not change. 
For L-bus breakpoint conditions. Do not change. 


















1-4 40 
10-15 0 
Others Loaded from MSR[16-31]. SRR1[30] is cleared only by loading a zero from MSR[RI]. 
If the development port request is asserted at reset, the value of SRR1 is undefined. 








IP No change 
ME No change 
LE Copied from the ILE setting of the interrupted process 














MOTOROLA Chapter 6.Exceptions 6-15 


Part ll. PowerPC Microprocessor Module 


Execution resumes from the following offsets from the base indicated by the MSR[IP]: 


e 0x01D00—-For an instruction breakpoint match 
° 0x01C00-For a data breakpoint match 
¢ 0x01E00-For a development port maskable request or a peripheral breakpoint 


¢ 0x01F00-—For a development port nonmaskable request 


6.1.4 Implementing the Precise Exception Model 


Because instructions execute in parallel they may execute out of order. To ensure that 
out-of-order execution does not affect data integrity, hardware ensures a precise exception 
model. As instructions are dispatched in-order to the execution units, they are assigned 
sequential positions in the six-entry completion queue, a FIFO buffer maintains program 
order. The completion queue is shown in Figure 3-2. 


When an exception condition is encountered, previous instructions in the completion queue 
are allowed to complete and be retired from the completion queue. If one of these 
instructions generates another exception, that exception is handled first. Subsequent 
instructions, and any results associated with them, are flushed from the processor before 
instruction processing resumes at the appropriate exception vector. Before control passes 
to the exception handler, machine state is saved in SRRO and SRR1. 


After an exception handler executes, the machine state of the interrupted process is 
restored, typically by executing the rfi instruction, which writes bits from SRR1 to the 
MSR, SRRO contains the instruction address at which fetching should resume. To correctly 
restore the architectural state, the CQ must record the value of the destination before the 
instruction is executed. The destination of a store instruction, however, is in memory and it 
is not practical from a performance standpoint to always read memory before writing it. 
Therefore, stores issue immediately to store buffers but do not update memory until all 
previous instructions have finished executing without exception or until the store 
instruction reaches CQO. | 


The completion queue can hold six instructions, but no more than four integer instructions. 
The other two instructions can be condition code or branch instructions. Long latency 
instructions may cause the completion queue to fill, stalling dispatch until the long latency 
instruction vacates the completion queue. The following instructions may cause the 
completion queue to fill: 


e Integer divide instructions 


e Instructions that affect or use resources external to the core (load/store instructions, 
and especially load/store string multiple/instructions) 
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6.1.5 Recoverability after an Exception 


The processor cannot always recover from system reset and machine check interrupts, 
either because the conditions that cause the interrupt are catastrophic or because they 
caused the save/restore information in SRRO and SRRIto be overwritten. 


All other PowerPC exceptions should be restartable. Registers such as SRRO and SRR1 
(and for some exceptions the data address register (DAR) and DSI status register (DSISR)) 
that may be affected by subsequent exceptions should be saved early in the routine to avoid 
being overwritten. Likewise, the saved values should be restored to those registers at the 
end of the handler routine in such a way that protects them from an exception before the 
instruction returns control to the interrupted process. Interrupts should also be masked in 
these areas by clearing (disabling) MSR[ME] for system reset and machine check 
interrupts and MSR[EE] for’ external interrupt, decrementer and two 
implementation-specific exceptions—debug port unmaskable interrupt and breakpoint 
interrupt in nonmaskable mode. 


The recoverable exception bit (MSR[RI]) is defined to notify the exception handler code 
whether it is in a restartable state. The MSR[RI] shadow bit in SRR1 indicates if the 
exception is restartable. This bit does not need to be checked on exception types that are 
restartable by convention, except those previously mentioned. When an exception occurs, 
MSR[RI] is copied to the equivalent bit in SRR1 and cleared. When an rfi instruction is 
executed, MSR[RI] is copied from SRR1 or software can change the bit by using it the 
mtmsr instruction. The MSR[RI] bit is intended to be set by the exception handler after 
saving the machine state, in SRRO and SRR1 (and DAR and DSISR if needed) and cleared 
by the exception handler before retrieving the machine state. 


In critical code sections where MSR[EE] is cleared but SRRO and SRR1 are not busy, 
MSR[RI] should remain set. In such cases, if an exception occurs, the process is restartable. 


Table 6-18 lists SPRs that facilitate manipulation of MSR[RI] and MSR[EE]. Writing to 
these locations performs the specified operation. Attempting to read these locations is 
treated as an unimplemented instruction and causes a software emulation exception. 


Table 6-18. Additional SPRs that Affect MSR Bits 










External interrupt enable: 
End of handler’s prologue, enable nested external interrupts; 
End of critical code segment in which external interrupts were disabled 













External interrupt disable, but other exception are recoverable: 
End of handler’s prologue, keep external nested interrupts disabled; 
Start of critical code segment in which external interrupts are disabled 


82 Nonrecoverable interrupt: 
Start of handler’s epilogue 
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Latency 
Figure 6-1 describes significant events during exception processing. 
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Figure 6-1. Exception Latency 
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Table 6-19. Exception Latency 


Instruction complete and all 
previous instructions complete 


D (at least 3 
clocks after B) 
E First instruction of handler 
dispatched 
A At time point A the excepting instruction dispatches and begins executing. Previously 
dispatched instructions are proceeding through the pipeline. 
















B The excepting instruction has executed and reached CQO; previous instructions have 
finished execution without generating exceptions. The exception is recognized and 
between B and D (between 3 and 10 cycles) the effects of any instructions after the one 
that generated the interrupt are cancelled and the instructions are flushed. If the 
instruction had not generated an exception, it would have been retired. 


C The core fetches the first instructions of the exception handler if the exception handler 
is external. It is 5 cycles if it is in the instruction cache and no-show mode is on. 


D Allstate has been restored. During the interval between D and E, the machine is saving 
context information in the SRRO and SRR1 registers, disabling exceptions, placing the 
machine in privileged mode, and fetching instructions of the exception handler. The 
interval between D and E requires at least one clock. The time between C and E depends 
on the memory system and the time it takes to fetch the first instruction of the exception 
handler. For full completion queue restore time, it is no less than two clocks. 


E The MSR and instruction pointer of the executing process have been saved and control 
has been transferred to the exception handler routine. Exception handler instructions 
that have been fetched can be dispatched. 


6.1.7 Partially Completed Instructions 


Partially completed instructions can be reexecuted after the exception is handled. This 
precise exception model can simplify exception processing because software does not have 
to save the machine’s internal states, unwind the pipelines, or cleanly terminate the faulting 
instruction stream and reverse the process to resume execution of the faulting stream. 
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Table 6-20. Before and After Exceptions 


Hard reset (caused by HRESET or SRESET) 











System reset 


Other noninstruction-related exceptions 


Alignment Load/store Faulting instruction 
Privileged instruction ny privileged instruction Faulting instruction 










A 
System call Next instruction to execute 
Trace Next instruction to execute 
A 
N 






Cc 
ny 
Floating-point unavailable __ 


' Implementation-specific exceptions not defined by the PowerPC architecture 
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Chapter 7 
Instruction and Data Caches 


The MPC850 contains separate, two-way set associative instruction (2-Kbyte) and data 
(1-Kbyte) caches to allow rapid core access to instructions and data. This chapter describes 
the organization of the on-chip instruction and data caches, cache control, various cache 
operations, and the interaction between the caches, the load/store unit (LSU), the 
instruction sequencer, and the system interface unit (SIU). 


The MPC850 cache implementation has the following characteristics: 


e There are separate 2-Kbyte instruction and 1-Kbyte data caches (Harvard 
architecture). 


e Both instruction and data caches are two-way Set associative. 


e The caches implement a least-recently-used (LRU) replacement algorithm within 
each set. 


e The cache directories are physically addressed. The physical (real) address tag is 
stored in the cache directory. 


e Both the instruction and data caches have 16-byte cache blocks. A cache block is the 
block of memory that a coherency state describes, also referred to as a cache line. 


e Two state bits for each data cache block allow encoding for three states: 
— Modified-valid (sometimes called ‘modified’) 
— Unmodified-valid (sometimes called ‘exclusive’ ) 
— Invalid 


e A single state bit for each instruction cache block allows encoding for two possible 
states: 


— Valid 
— Invalid 


¢ Both caches can be disabled, invalidated, or locked by issuing commands to their 
respective cache control registers, special-purpose registers (SPRs) specific to the 
MPC850. See Section 7.3, “Cache Control Registers,’ for more information. 


e Individual cache blocks can be locked so that frequently accessed instructions 
and/or data are guaranteed to be resident in the respective cache. 
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On a cache miss, the MPC850’s cache blocks are filled in 16-byte bursts. The burst fill is 
performed as a critical-word-first operation; the critical word is simultaneously written to 
the cache and forwarded to the requesting unit, thus minimizing stalls due to cache fill 


latency. Both caches provide storage for cache tags and perform cache block replacement 
(LRU) function. 


Both caches are tightly coupled to the MPC850’s system interface unit (SIU) to allow 
efficient access to the system memory controller and other bus masters. The SIU receives 
requests for bus operations from the instruction and data caches, and executes the 
operations per the external bus protocol. 


The data cache provides buffers for load and store bus operations. The data cache supplies 
data to the GPRs by means of a 32-bit interface to the load/store unit. The LSU is directly 
coupled to the data cache to allow efficient movement of data to and from the 
general-purpose registers. The load/store unit provides all logic required to calculate 
effective addresses, handles data alignment to and from the data cache, and provides 
sequencing for load and store string and multiple operations. Write operations to the data 
cache can be performed on a byte, half-word, or word basis. | 


The instruction cache provides a 32-bit interface to the instruction sequencer. The 
instruction sequencer uses the instruction cache as much as possible in order to sustain the 
high throughput provided by the four-entry instruction queue. 


7.1 Instruction Cache Organization 


The MPC850 instruction cache is organized as 64 sets of two blocks, as shown in 
Figure 7-1. Each block consists of 16 bytes, a single state bit, a lock bit, and an address tag. 
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MMU 
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Bidirectional multiplexer 2 -> 1 





128 


HIT 


To block buffer/ 
From burst buffer 


Figure 7-1. Instruction Cache Organization 


Each instruction cache block contains four contiguous words from memory that are loaded 
from a four-word boundary (that is, bits A[28—31] of the logical (effective) addresses are 
zero); aS a result, cache blocks are aligned with page boundaries. Also, address bits 
A[22-27] provide the index to select a set, and bits A[28—29] select a word within a block. 
The tags consist of the high-order physical address bits PA[O—21]. Address translation 
occurs in parallel with set selection (from A[22—27]). 
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The instruction cache implements a single state bit for each cache block that indicates 
whether the cache block is valid or invalid. The MPC850 does not support snooping of the 
instruction cache. All memory is considered to have memory-coherency-not-required 
attributes. Therefore, software must maintain instruction cache coherency. The 
MPC850supports a fast instruction cache invalidate capability as described in 
Section 7.3.1.2.5, “Instruction Cache Invalidate All Command.” 


The instruction cache also implements a lock bit for each cache block that allows 
instructions to be loaded into the instruction cache and locked—providing fast and 
deterministic execution time for critical code segments. The MPC850 supports commands 
for locking and unlocking individual cache blocks and for unlocking all the cache blocks at 
once. 
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7.2 Data Cache Organization 


The data cache is organized as 32 sets of two blocks as shown in Figure 7-2. Each block 
consists of 16 bytes, two state bits, a lock bit, and an address tag. 


0 22 23 27 28 31 





Data effective address 
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sett [tagt || | [wo[wi[we[wa]- |, |-- [aot [[ [ [wo [wi [we [wa 
R 
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A 
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Figure 7-2. Data Cache Organization 


Each cache block contains four contiguous words from memory that are loaded from a 
four-word boundary (that is, bits A[28—31] of the logical (effective) addresses are zero); as 
a result, cache blocks are aligned with page boundaries. Note that address bits A[23—27] 
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provide the index to select a cache set. Bits A[28—31] select a byte within a block. The tags 
consist of the high-order physical address bits PA[Q—22]. Address translation occurs in 
parallel with set selection (from A[23—27]). 


The two state bits implement a three-state (modified-valid/unmodified-valid/invalid) 
protocol. The MPC850 does not provide support for snooping external bus activity. All 
coherency between the internal caches and external agents (memory or I/O devices) must 
be controlled by software. 


The data cache also implements a lock bit for each cache block that allows data to be loaded 
into the data cache and locked. The MPC850 supports commands for locking and unlocking 
individual cache blocks and for unlocking all the cache blocks at once. 


7.3 Cache Control Registers 


The MPC850’s caches are controlled by programming commands using the cache control 
registers and by issuing dedicated PowerPC cache control instructions. This section 
describes control of the instruction and data caches by the cache control registers. 
Section 7.4, “PowerPC Cache Control Instructions,’ describes the PowerPC cache control 
instructions. 


7.3.1 Instruction Cache Control Registers 


The MPC850 implements three special purpose registers (SPRs) to control the instruction 
cache—the instruction cache control and status register (IC_CST), the instruction cache 
address register (IC_ADR), and the instruction cache data port register (I(C_DAT). The 
instruction cache can be disabled, invalidated, or locked by issuing the appropriate 
commands to the instruction cache control registers IC_CST, IC_ADR, and [C_DAT). In 
addition, the instruction cache control registers can be used to read the contents and tags of 
specific instruction cache blocks. | 


The mtspr and mfspr instructions are used to access the cache control registers, but they 
can be accessed only by supervisor-level programs (that is, when MSR[PR] = 0). Any 
attempt to access these SPRs with a user-level program (MSR[PR] = 1) results in a 
supervisor-level program exception. 


The IC_CST register, shown in Figure 7-3, has an SPR encoding of 560. 


PO EE LEE oO Ce EE EE ET CEO EE EE EE TEE EE EEE EE EE EE EEE EEE EEE =X EEE EEE EE EEE EEE EEE IEE SESE EE SESE 
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Figure 7-3. Instruction Cache Control and Status Register (IC_CST) 
Table 7-1 describes the bits of the IC_CST register. 


Table 7-1. Instruction Cache Control and Status Register—IC_CST 
[oo 
¥ Note that this is a read-only bit. Any attempt to write to it is ignored. 


Instruction cache enable status. 
0 The instruction cache is disabled 
1 The instruction cache is enabled 
4-6 Instruction cache command 
000 Reserved 
001 Cache enable 
010 Cache disable 
011 Load & lock cache block 
100 Unlock cache block 
101 Unlock all 
110 Invalidate all 
111 Reserved 
Note that reading these bits always returns 0b000 
SS 


Instruction cache error type 1—bus error during an IC_CST load & load cache block command 
0 No error detected 

1 Error detected 

Note that this is a read-only, sticky bit, set only by the MPC850 when an error is detected. 
Reading this bit clears it. 


Reading this bit clears it. 


fe CCER3_ | Instruction cache error type 3—reserved. 
En 


IEN 
CMD 
CCER2 _ | Instruction cache error type 2—no unlocked way available for an IC_CST load & lock cache 
block command 
0 No error detected 
1 Error detected 
Note that this is a read-only, sticky bit, set only by the MPC850 when an error is detected. 


7-9 
CCER1 
11 
12 
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The IC_ADR register, shown in Figure 7-4, has an SPR encoding of 561. 





Figure 7-4. Instruction Cache Address Register (IC_ADR) 


Table 7-2 describes the bits of the IC_ADR register. 
Table 7-2. Instruction Cache Address Register —IC_ADR 


efi [Ome 


0-31] ADR _ | Instruction cache command address. When programming the IC_CST[CMD] load & lock cache block 
and unlock cache block commands, IC_ADR contains the physical address in external memory of 
the desired cache block element. When reading the data, tags, and status contained within the 


instruction cache, IC_ADR is used to qualify what is to be read according to Table 7-4. See 
Section 7.3.1.1, “Reading Data and Tags within the Instruction Cache,” for more information. 





The IC_DAT register, shown in Figure 7-5, has an SPR encoding of 562. 


Figure 7-5. Instruction Cache Data Port Register (IC_DAT) 





Table 7-3 describes the bits of the IC_DAT register. 
Table 7-3. Instruction Cache Data Port Register—IC_DAT 


ee 


Instruction cache command data. The data received when reading information from the 
instruction cache. See Section 7.3.1.1, “Reading Data and Tags within the Instruction Cache,” 
for more information. 





7.3.1.1 Reading Data and Tags within the Instruction Cache 

The MPC850 supports reading the data, tags, and the state and lock bits stored in the 
instruction cache. The instruction cache read command, issued by reading the IC_DAT 
register, uses the IC_ADR register to qualify what is to be read. Table 7-4 describes the 
fields of the IC_ADR register during an instruction cache read command. 
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Table 7-4. IC_ADR Fields for Cache Read Commands 


3 0 Tag QO Way 0 F Set select Word select 
; 1 Data 1 Way 1 


(0-63) (used only for 
To read the data or tags stored in the instruction cache: 









data array) 





1. Write the address of the data or tag to be read to the IC_ADR, according to the 
format shown in Table 7-4. 
Note that it is also possible to read this register for debugging purposes. 


2. Read the IC_DAT register. 


For data array (IC_ADR[18] = 0) read commands, the word selected by IC_ADR[28—29] 
is placed in the target general-purpose register. For tag array (IC_ADR[18] = 1) read 
commands, the tag and state information is placed in the target general-purpose register. 
Table 7-5 provides the format of the IC_DAT register when reading a tag. 


Table 7-5. 1C_DAT Format when Reading a Tag 
Tag value 0 Invalid 0 Unlocked LRU bit of this set 
1 Valid 1 Locked 
7.3.1.2 IC_ CST Commands 


All IC_CST commands, except the load & lock cache block command, are executed 
immediately after writing to the [C_CST register and do not generate any errors. Therefore, 
when executing these commands there is no need to check the error type bits in the IC_CST 
register. All commands should be followed by an isync instruction, if the instruction cache 
command is required to affect all instruction fetches that come after it in the program order. 
In addition, correct operation of the instruction cache relies on software following the 
procedures described in Section 7.5.5, “Updating Code And Memory Region Attributes.” 





Note that when the instruction cache is executing a command, it stops handling CPU 
requests, which can result in machine stalls. 


7.3.1.2.1 Instruction Cache Enable/Disable Commands 

The instruction cache enable command (IC_CST[CMD] = 0b001) is used to enable the 
instruction cache; the instruction cache disable command (IC_CST[CMD] = 0b010) is used 
to disable the instruction cache. Neither of these commands has any error cases. The current 


state of the instruction cache is available by reading the instruction cache enable status bit 
(IC_CST[TEN]). 


When disabled, the MPC8SOignores the instruction cache valid bit and operates as if all 
accesses have caching-inhibited access attributes (that is, all instruction fetches are 
propagated to the bus as single-beat transactions). Disabling the instruction cache does not 


pop ptetongnennnon nono sen anna nana a ata ne Gia Ua Ais aA Osa OR AND SOEREEDSARBONRSE SINR DOORES ANTE SEDO DROOL OR ROL ODE ODDS BO SIE Gono aS aaa EEER DOSES TORR RO DOTA ERG AEA AE ODOR DEEL DDEOSEE OER E IS ADARE SESS anOR ICO nE Onno RaDOoNDoOR DORR ODD D ana ataneD aa DEnSaDRGD pane DE ne Don ean nonS-00590052000seEnnnoSgaLe SERRE RE GOR sno GanaboeaG6865 baneps eonaRGoeesGoneagabondadS oeagden Dae pt ape n atone apap Enea ana aot pip a ER Epa tee R Ati RODE 
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affect the instruction address translation logic, MSR[IR] controls instruction address 
translation. | 


At hard reset, the instruction cache is disabled. 


7.3.1.2.2 Instruction Cache Load & Lock Cache Block Command 
The instruction cache load & lock cache block command (IC_CST[CMD] = 0b011) is used 
to lock critical code segments in the instruction cache. Locked cache blocks are not 
replaced during misses and are not affected by invalidate commands. Correct operation of 
locked instruction cache blocks relies on software following the procedures described in 
Section 7.5.5, “Updating Code And Memory Region Attributes.” 
To load & lock one or more cache blocks: 

1. Read the IC_CST error type bits to clear them. 

2. Write the address of the cache block to be locked to the IC_ADR register. 


3. Write the load & lock cache block command (IC_CST[CMD] = 0b011) to the 
IC_CST register. | | 


4. Execute an isync instruction. 
5. Repeat steps 2 through 4 to load & lock another cache block. 


6. Read the IC_CST error type bits to determine if the sequence completed without 
errors. | 


After the load & lock cache block command is written to the IC_CST register, the cache 


checks if the block containing the byte addressed by IC_ADR[ADR] is in the cache (hit). 
If it is in the cache, the block is locked. If the block is not in the cache, a normal miss 
sequence is initiated (see Section 7.5.2, “Instruction Cache Miss,” for more information). 
After the addressed block is placed into the cache, the block is locked. 


The user must check the IC_CST error type bits to determine if the load & lock cache block 
operation completed without error. The load & lock cache block command generates two 
possible errors: | | 


¢ Type 1—a bus error occurred in one of the fetch cycles 


e Type 2—there is no available way to lock (It is the responsibility of the user to make 
sure that there is at least one unlocked way in the appropriate set.) 


The error type bits in the IC_CST register are sticky, thus allowing the user to perform a 
series of load & lock cache block commands before checking the termination status. These 
bits are set by the MPC850and are cleared by software. 


Note that the MPC850 considers all zero-wait-state devices on the internal bus as 
caching-inhibited. For this reason, software should not perform load & lock cache block 
operations from these devices on the internal bus. | 
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7.3.1.2.3 Instruction Cache Unlock Cache Block Command 


The unlock cache block command (IC_CST[CMD] = 0b100) is used to unlock previously 
locked cache blocks. To unlock a cache block: 


1. Write the address of the cache block to be unlocked to the IC_ADR register. 


2. Write the unlock cache block command (IC_CST[CMD] = 0b100) to the IC_CST 
register. 


If the block is found in the cache (hit), it is unlocked and thereafter operates as a regular 
valid cache block. If the block is not found in the cache (miss), no operation is performed. 
There are no error cases for the unlock block command. 


The instruction cache performs the unlock cache block command in one clock cycle. 


7.3.1.2.4 Instruction Cache Unlock All Command 
The unlock all command (IC_CST[CMD] = 0b101) is used to unlock the entire instruction 
cache with a single command. 


When the unlock all command is performed, if a cache block is locked, it is unlocked and 
thereafter operates as a regular valid cache block. If a block is not locked or if it is marked 
invalid, no operation is performed. There are no error cases for the unlock all command 


The instruction cache performs the unlock all command in one clock cycle. 


7.3.1.2.5 Instruction Cache Invalidate All Command 

The instruction cache invalidate all command (IC_CST[CMD] = 0b110) causes all 
unlocked, valid blocks in the instruction cache to be marked invalid. As a result of the 
invalidate all command, the LRU bits of all cache blocks point to either the unlocked way 
or to way 0 if both ways are unlocked. There are no error cases for the invalidate all 
command. 


The instruction cache performs the invalidate all command in one clock cycle. 


7.3.2 Data Cache Control Registers 


The MPC850 implements three special purpose registers (SPRs) to control the data 
cache—the data cache control and status register (DC_CST), the data cache address 
register (DC_ADR), and the data cache data port register (DC_DAT). The data cache can 
be disabled, invalidated, locked, or flushed by issuing the appropriate commands to the data 
cache control registers (DC_CST, DC_ADR, and DC_DAT). Also, the data cache control 
registers can be used to read the contents and tags of specific data cache blocks. 


DC_CST[DFWT] can be used to force the data cache into write-through mode. 
DC_CST[LES] controls true-little endian byte-ordering of the MPC850 . See Appendix A, 
“Byte Ordering,’ for more information. 


The mtspr and mfspr instructions are used to access the cache control registers, but they 
can be accessed only by supervisor-level programs (that is, when MSR[PR] = 0). Any 
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attempt to access these SPRs with a user-level program (MSR[PR] = 1) results in a 
supervisor-level program exception. | | 


The DC_CST register, shown in Figure 7-6, has an SPR encoding of 568. 


CCER | CCER | CCER 
orwr| us | — 


Sw = | 





Figure 7-6. Data Cache Control and Status Register (DC_CST) 


Table 7-6 describes the bits of the DC_CST register. 
Table 7-6. Data Cache Control and Status Register—DC_CST 


Data cache enable status 

0 _‘-The data cache is disabled 

q The data cache is enabled 

Note that this is a read-only bit. Any attempt to write to it is ignored. This bit is programmed by 
issuing the appropriate command in DC_CST[CMD]. 


Data cache forced write-through 

0 _‘- The write-through behavior of the data cache is determined by the write-through 
memory/cache access attribute (the W bit) in the MMU. 

1 Writes to the data cache are forced to write through to memory. 

Note that this is a read-only bit. Any attempt to write to it is ignored. This bit is programmed by 

issuing the appropriate command in DC_CST[CMD]. 


Little-endian swap | 

0 _—_ Used for big-endian (BE) and PowerPC little-endian (PPC-LE) modes. No modifications to the 
address or byte lanes are performed. 

1 Used for true little-endian (TLE) mode. A 2-bit munge is performed on the physical address 
‘before accessing the internal U-bus. Also, for accesses originating from the PowerPC core, 
the SIU unmunges the address and swaps the bytes of data within each word at the external 
bus/internal U-bus boundary. | 

See Appendix A, “Byte Ordering,” for more information on MPC850 byte ordering. Note that this is 

a read-only bit. Any attempt to write to it is ignored. This bit is programmed by issuing the 

appropriate command in DC_CST[CMD]. 


Reserved | 
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Table 7-6. Data Cache Control and Status Register—DC_CST (Continued) 


fee ee 


4-7 CMD _ |Data cache command 

0000 Reserved 

0001 Set forced write-through bit 
0010 Cache enable 

0011 Clear forced write-through bit 
0100 Cache disable 

0101 Set true little-endian swap bit 
0110 Load & lock cache block 
0111 Clear little-endian swap bit 
1000 Unlock cache block 

1001 Reserved 

1010 Unlock all 

1011 Reserved 

1100 Invalidate all 

1101 Reserved 

1110 Flush cache block 

1111 Reserved 

Note that reading these bits always returns 0b0000 


CCER1 | Data cache error type 1—copyback error during debf or debst instruction execution or during 


DC_CST flush cache block command. A machine check exception is generated when this bit is set. 
11 CCER2 | Data cache error type 2. This bit indicates one of two possible errors—either a bus error during 

DC_CST load & load cache block or flush cache block command or there is no unlocked way 

available for a DC_CST load & lock cache block or flush cache block command. 

0  Noerror detected 

1 Error detected 

Note that this is a read-only, sticky bit, set only by the MPC850 when an error is detected. Reading 












































0 No error detected 
this bit clears it. 


1 Error detected 
Note that this is a read-only, sticky bit, set only by the MPC850 when an error is detected. Reading 
CCER3 | Data cache error type 3—reserved 


this bit clears it. 
The DC_ADR register, shown in Figure 7-7, has an SPR encoding of 569. 





Figure 7-7. Data Cache Address Register (DC_ADR) 
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Table 7-7 describes the bits of the DC_ADR register. 


Table 7-7. Data Cache Address Register—DC_ADR 


sd 


Data cache command address. When programming the DC_CST load & lock cache block, unlock 
cache block, and flush cache block commands, DC_ADR contains the physical address of the 


desired cache block element in external memory. When reading the data, tags, and status 
contained within the data cache, DC_ADR is used to qualify what is to be read according to 
Table 7-7. See Section 7.3.2.1, “Reading Data Cache Tags and Copyback Buffer,” for more 
information. 





The DC_DAT register, shown in Figure 7-8, has an SPR encoding of 570. 





_ Figure 7-8. Data Cache Data Port Register (DC_DAT) 
Table 7-8 describes the bits of the DC_DAT register. | 
Table 7-8. Data Cache Data Port Register—DC_DAT 


ee 


Section 7.3.2.1, “Reading Data Cache Tags and Copyback Buffer,” for more information. 





DAT  |Data cache command data. The data received when reading information from the data cache. See 


7.3.2.1 Reading Data Cache Tags and Copyback Buffer 


The MPC850 supports reading the tags, the state bits and the lock bits stored in the data 
cache as well as the last copyback address, and data words in the copyback buffer. The data 
cache read command, issued by reading DC_DAT, uses the DC_ADR register to qualify 
what is to be read. Table 7-4 describes the fields of the DC_ADR register during a data 
cache read command. | 


Table 7-9. DC_ADR Fields for Cache Read Commands 


0 Tags 0 Way 0 
1 Way 1 


Set select 
(0-31) 
1 Copyback 
buffer 














Copyback buffer 
address/ 
data-word select 
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To read the copyback buffer data or the tags stored in the data cache: 


1. Write the address of the copyback buffer or tag to be read to the DC_ADR, 
according to the format shown in Table 7-4. 
Note that it is also possible to read this register for debugging purposes. 


2. Read the DC_DAT register. Note that writing to the DC_DAT register is illegal. A 
write to DC_DAT results in an undefined data cache state. 


For tag array (DC_ADR[18] = 0) read commands, the tag and state information is placed 
in the target general-purpose register. Table 7-5 provides the format of the DC_DAT 
register when reading a tag. 


Table 7-10. DC_DAT Format when Reading a Tag 
Tag value | Reserved | 0 Invalid 0 Unlocked | LRU bit of this |0 Unmodified | 
oF) 1 Valid 1 Locked set 1 Modified 


The last copyback address or data buffer can be read by using the copyback buffer read 
command (DC_ADR[18] = 1). The copyback buffer select field (DC_ADR[23—27]), shown 
in Table 7-11, determines which word of the cache block in the copyback buffer is read. 











Table 7-11. Copyback Buffer Select Field (DC_CST[21—27]) Encoding 


DC_CST[23-27] Buffer Selected 
(in hex) 


Copyback buffer data word 0 
Copyback buffer data word 1 


Copyback buffer data word 2 
Copyback buffer data word 3 





7.3.2.2 DC_CST Commands 

All DC_CST commands, except the load & lock cache block and flush cache block 
commands, are executed immediately after writing to the DC_CST register and do not 
generate any errors. Therefore, there is no need to check the error type bits in the DC_CST 
register except when executing the load & lock cache block and flush cache block 
commands. 


Note that when the data cache is executing a command, it stops handling CPU requests, 
which can result in machine stalls. 


Fe a aa Se ee aeRO ORS RR ae ORR eR E E RRR eaecee ree eeeaea eer aeena anata re eee oar tence eon rc ae iran cere aera eee eee ee cere nearer nena een aera erect eee eee eee 
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7.3.2.2.1 Data Cache Enable/Disable Commands | | 
The data cache enable command (DC_CST[CMD] = 0b0010) is used to enable the data 
cache; the data cache disable command (DC_CST[CMD] = 0b0100) is used to disable the 


data cache. Neither of these commands has any error cases. The current state of the data 
cache is available by reading the data cache enable status bit (DC_CST[DEN]). 


When disabled, the MPC850 ignores the data cache state bits and operates as if all accesses 
have caching-inhibited access attributes (that is, all accesses are propagated to the bus as 
single-beat transactions). Disabling the data cache does not affect the data address 
translation logic; MSR[DR] controls data address translation. 


Note that the data cache is disabled at hard reset. Also, the data cache is automatically 
disabled when a type 1 data cache error (see Table 7-6 for DC_CST[CCER1] conditions) 
generates a machine check exception. 


7.3.2.2.2 Data Cache Load & Lock Cache Block Command 


The data cache load & lock cache block command (DC_CST[CMD] = 0b0110) is used to 
lock critical data in the data cache. Locked cache blocks are not replaced during misses and 
are not affected by invalidate commands. 


To load & lock one or more cache blocks: 


1. Read the DC_CST error type bits to clear them. 
2. Write the address of the cache block to be locked to the DC_ADR register. 


3. Write the load & lock cache block command (DC_CST[CMD] = 0b0110) to the 
DC_CST register. 


4. Repeat steps 2 and 3 to load & lock another cache block. 
5. Read DC_CST[CCER2] to determine if the sequence completed without errors. 


After the load & lock cache block command is written to the DC_CST register, the cache 
checks if the block containing the byte addressed by DC_ADR[ADR] is in the cache (hit). 
If it is in the cache, the block is locked and the command terminates with no exception. If 
the block is not in the cache, a normal miss sequence is initiated (see Section 7.6, “Data 
Cache Operation,’ for more information). After the addressed block is placed into the 
cache, the block is locked. | 


The user must check DC_CST[CCER2] to determine if the load & lock cache block 
operation completed without error. The error type bits in the DC_CST register are sticky, 
thus allowing the user to perform a series of load & lock commands before checking the 
termination status. These bits are set by the MPC850 and are cleared by software. 


Note that the MPC850 considers all zero-wait-state devices on the internal bus as 
caching-inhibited. For this reason, software should not perform load & lock operations 
from these devices on the internal bus. 
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7.3.2.2.3 Data Cache Unlock Cache Block Command 


The unlock cache block command (DC_CST[CMD] = 0b1000) is used to unlock 
previously locked cache blocks. To unlock a cache block: 


1. Write the address of the cache block to be unlocked to the DC_ADR register. 


2. Write the unlock cache block command (DC_CST[CMD] = 0b1000) to the 
DC_CST register. 


If the block is found in the cache (hit), it is unlocked and thereafter operates as a regular 
valid cache block. If the block is not found in the cache (miss), no operation is performed. 
There are no error cases for the unlock block command. 


The data cache performs the unlock cache block command in one clock cycle. 


7.3.2.2.4 Data Cache Unlock All Command 

The data cache unlock all command (DC_CST[CMD] = 0b1010) is used to unlock the 
entire data cache with a single command. When the unlock all command is performed, if a 
cache block is locked, it is unlocked and thereafter operates as a regular valid cache block. 
If a block is not locked or if it is marked invalid, no operation is performed. There are no 
error cases for the unlock all command. 


The data cache performs the unlock all command in one clock cycle. 


7.3.2.2.5 Data Cache Invalidate All Command 

The data cache invalidate all command (DC_CST[CMD] = 0b1100) causes all unlocked, 
valid blocks in the data cache to be marked invalid, regardless of whether the data is 
modified. Therefore, this command may effectively destroy modified data. To invalidate the 
entire data cache the invalidate all command should be preceded by an unlock all command. 
Note that the data cache is not automatically invalidated at hard reset. 


As a result of the invalidate all command, the LRU bits of all cache blocks point to either 
the unlocked way or to way 0 if both ways are unlocked. There are no error cases for the 
invalidate all command. 


The data cache performs the invalidate all command in one clock cycle. 


7.3.2.2.6 Data Cache Flush Cache Block Command 

The data cache flush cache block command (DC_CST[CMD] = 0b1110) is used to write 
the contents of an unlocked, modified-valid cache block to memory and subsequently 
invalidate that cache block. If the cache block is unmodified-valid, the cache block is 
invalidated without writing the contents to memory. If the cache block is locked or if it 1s 
marked invalid, no operation is performed. 


If a bus error occurs while executing the DC_CST flush cache block command, 
DC_CST[CCER1] is set and a machine check exception is generated. The data of the cache 
block flagged by the bus error is contained in the copyback buffer; it will have already been 
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flushed from the data cache array. See Section 7.3.2.1, ene Data Cache Tags and 
Copyback Buffer,’ for more information. 


The PowerPC cache control instructions dcbst and dcbf can also be used to flush the data 
cache. Note that the PowerPC cache control instructions operate on effective addresses that 
are translated while the DC_CST flush cache block command operates on a physically 
addressed block contained within the data cache. When there is a need to restrict the 
flushing to a specific memory area or to maintain architectural compliance, it is 
recommended to use the PowerPC cache control instructions; when there is a need to flush 
the entire data cache and there is no concern for architectural compliance, using the 
DC_CST flush cache block command is more efficient. 


7.4 PowerPC Cache Control Instructions 


The PowerPC architecture defines instructions for controlling both the instruction and data 
caches. The cache control instructions, icbi, dcbt, dcbtst, dcbz, dcbst, dcbf, and debi, are 
intended for the management of the local caches. In the following descriptions, the 
memory/cache access attributes refer to the — write-through/write-back, 
caching-inhibited/caching-allowed, guarded/not guarded status of the addressed page. 


Note that the MPC850 does not broadcast cache control instructions nor does it snoop such 
broadcasts. 


A TLB miss exception is generated if the effective address of one of these instructions 
cannot be translated and data address relocation is enabled. A TLB error exception is 
generated if these instructions encounter a TLB protection violation. 


7.4.1 Instruction Cache Block Invalidate (icbi) 


The effective address is computed, translated, and checked for protection violations as 
defined in the PowerPC architecture. This instruction is treated as a store with respect to 
address translation and memory protection. If the address hits an unlocked block in the 
instruction cache, the cache block is placed in the invalid state. If the address misses in the 
instruction cache or if the block is locked, no action is taken. The function of this instruction 
is independent of the memory/cache access attributes. 


This command is not privileged and has no associated error cases. The instruction cache 
performs the icbi instruction in one clock cycle. To accurately calculate the latency of this 
instruction, bus latency should be taken into consideration. 


7.4.2 Data Cache Block Touch (dcbt) and 
Data Cache Block Touch for Store (dcbtst) 


The Data Cache Block Touch (debt) and Data Cache Block Touch for Store (dcbtst) 
instructions provide potential system performance improvement through the use of 
software-initiated prefetch hints. The MPC850 treats these instructions identically (that is, 
a dcbtst instruction behaves exactly the same as a debt instruction on the MPC850). 
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The MPC850 loads the data into the cache when the effective address hits in the TLB, is 
permitted load access from the addressed page, and 1s directed at a caching-allowed page. 
Otherwise, the MPC850 treats these instructions as no-ops. The data brought into the cache 
as a result of this instruction is validated in the same manner that a load instruction would 
be (that is, it is marked as unmodified-valid). Note that the successful execution of the dcbt 
(or dcbtst) instruction affects the state of the TLB and cache LRU bits. 


7.4.3 Data Cache Block Zero (dcbz) 


The effective address is computed, translated, and checked for protection violations as 
defined in the PowerPC architecture. The dcbz instruction is treated as a store to the 
addressed byte with respect to address translation and protection. 


If the block containing the byte addressed by the EA is in the data cache, all bytes are 
cleared, and the tag is marked as modified-valid. If the block containing the byte addressed 
by the EA is not in the data cache and the corresponding page is caching-allowed, the block 
is established in the data cache without fetching the block from main memory, and all bytes 
of the block are cleared, and the tag is marked as modified-valid. 


The debz instruction executes regardless of whether the cache block is locked, but if the 
cache is disabled, an alignment exception is generated. If the page containing the byte 
addressed by the EA is caching-inhibited or write-through, then the system alignment 
exception handler is invoked. 


7.4.4 Data Cache Block Store (dcbst) 


The effective address is computed, translated, and checked for protection violations as 
defined in the PowerPC architecture. This instruction is treated as a load with respect to 
address translation and memory protection. 


If the address hits in the cache and the cache block is in the unmodified-valid state, no 
action is taken. If the address hits in the cache and the cache block is in the modified-valid 
state, the modified block is written back to memory and the cache block is placed in the 
unmodified-valid state. 


If a bus error occurs while executing the dcbst instruction, DC_CST[CCER1] is set and a 
machine check exception is generated. The data of the cache block flagged by the bus error 
is retrieved from the copyback buffer, not from the data cache. See Section 7.3.2.1, 
“Reading Data Cache Tags and Copyback Buffer,” for more information. 


The function of this instruction is independent of the memory/cache access attributes. The 
dcbst instruction executes regardless of whether the cache is disabled or the cache block is 
locked. 
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7.4.5 Data Cache Block Flush (dcbf) 


The effective address is computed, translated, and checked for protection violations as 
defined in the PowerPC architecture. This instruction is treated as a load with respect to 
address translation and memory protection. | 


If the address hits in the cache, and the block is in the modified-valid state, the modified 
block is written back to memory and the cache block is placed in the invalid state. If the 
address hits in the cache, and the cache block is in the unmodified-valid state, the cache 
block is placed in the invalid state. If the address misses in the cache, no action is taken. 


If a bus error occurs while executing the dcbf instruction, DC_CST[CCER1] is set and a 
machine check exception is generated. The data of the cache block flagged by the bus error 
is retrieved from the copyback buffer, not from the data cache. See Section 7.3.2.1, 
“Reading Data Cache Tags and Copyback Buffer,’ for more information. 


The function of this instruction is independent of the memory/cache access attributes. The 
dcbf instruction executes regardless of whether the cache is disabled or the cache block is 
locked. 


7.4.6 Data Cache Block Invalidate (dcbi) 


The effective address is computed, translated, and checked for protection violations as 
defined in the PowerPC architecture. This instruction is treated as a store with respect to 
address translation and memory protection. 


If the address hits in the cache, the cache block is placed in the invalid state, regardless of 
whether the data is modified. If the address misses in the cache, no action is taken. Because 
this instruction may effectively destroy modified data, it is privileged (that is, dcbi is 
available only to programs at the supervisor privilege level, MSR[PR] = 0). 


The function of this instruction is independent of the memory/cache access attributes. The 
debi instruction executes regardless of whether the cache is disabled or the cache block is 
locked. : 


7.5 Instruction Cache Operations 


When the instruction MMU is enabled (MSR[IR] = 1), the instruction cache operates as 
defined by the memory/cache access attributes. When the instruction MMU is disabled 
(MSR[IR] = 0), the instruction cache operates as defined by the default instruction memory 
access attributes. The default state of the caching-inhibited/caching-allowed attribute is 
determined by MI_CTR[CIDEF], and the entire memory space defaults to the guarded 
attribute. See Chapter 8, “Memory Management Unit,” for more information. 


An instruction cache access begins with an instruction fetch request from the instruction 
sequencer in the PowerPC core. As shown in Figure 7-1, bits 22—27 of the instruction 
address provide the index to select a set (0-63) within the instruction cache array. The tags 
from both ways of the set are compared against bits 0-21 of the instruction address. If a 
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match is found and the matched entry is valid, then it is a cache hit. If neither tag matches 
or the matched tag is not valid, it is a cache miss. 


The data path for the instruction cache and its surrounding logic are shown in Figure 7-9. 


Address [22-27] 





Set Instruction Cache 
Decoder Array 





Address [28-29] 









Cache 
Block 
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Stream 
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2->1 
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32 


To Instruction 
Sequencer 


Internal Data Bus 


Figure 7-9. instruction Cache Data Path 


The 4-word burst buffer holds the last cache block received from the internal bus (the last 
miss); the 4-word block buffer holds the last block retrieved from the instruction cache (the 
last hit). Note that if one of these buffers contains the requested instruction, it is also 
considered a cache hit. To minimize power consumption, the MPC850 can detect that one 
of the buffers contains the requested instruction and service the instruction request from the 
buffers without activating the instruction cache array. 
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The MPC850instruction cache includes the following operational features: 


e Instruction fetch latency is reduced by sending the requested instruction address to 
the instruction cache and internal bus simultaneously. A cache hit aborts the internal 
bus transaction before the MPC850 can initiate an external fetch. 


e The instruction cache supports stream hits (allows fetching from the burst buffer or 
directly from the internal data bus, before the instruction cache array is filled) 


e The instruction cache supports hits under misses (allows servicing hits while a 
previous miss is being fetched from the external bus) 


e A fetch request from the instruction sequencer has priority over burst buffer writes 
to the cache array (the burst buffer holds the last missed cache block), thus 
increasing the overall performance 


e Efficiently uses the pipeblock of the internal data bus by initiating a new burst cycle 
(if miss 1s detected) while bringing the tail of the previous missed block 


e Performance for caching-inhibited regions is enhanced by fetching a full 4-word 
block into the burst buffer. Instructions in the burst buffer are only used once before 
being refetched 


7.5.1 Instruction Cache Hit 


In the case of a cache hit, the cache block is transferred to the cache block buffer and 
forwarded to the stream hit multiplexer and word select multiplexer. As shown in 
Figure 7-1, bits 28—29 of the instruction address are used to select one word of the cache 
block which is transferred to the instruction sequencer in the core. 


7.5.2 Instruction Cache Miss 


On an instruction cache miss, the address of the missed instruction is driven on the internal 
bus with a 4-word burst transfer read request. The transfer begins with the word requested 
by the instruction sequencer (critical-word first), followed by the remaining words (if any) 
of the cache block, then by any remaining words at the beginning of the block 
(wrap-around). 


On a cache miss, the critical word is simultaneously written to the burst buffer and 
forwarded to the instruction sequencer, thus minimizing stalls due to cache fill latency. As 
subsequent words are received from the internal bus, they are also written into the burst 
buffer and delivered to the instruction sequencer either directly from the internal bus or 
from the burst buffer (a stream hit). A cache block in the array is then selected to receive 
the cache block being gathered in the burst buffer. The selection algorithm gives first 
priority to invalid blocks. If both blocks in the set are marked invalid, the block in way 0 is 
selected. If neither of the two blocks in the selected set are invalid, then the least recently 
used block is selected for replacement. Locked cache blocks are never replaced. 


The instruction cache is not blocked to internal accesses while the fetch (caused by a cache 
miss) completes. This functionality is sometimes referred to as ‘hits under misses,’ because 
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the cache can service a hit while a cache miss fill is waiting to complete. If no bus errors 
are encountered during the 4-word cache block fetch, the burst buffer is marked valid and 
written to the cache array, provided the cache array is not busy servicing a hit. 


If a bus error is encountered while fetching the requested instruction (the critical word), 
then a machine check exception is generated. If a bus error occurs while fetching 
subsequent words in the cache block, then the burst buffer is marked invalid and the cache 
block is not written to the cache array. 


7.5.3 Instruction Fetching on a Predicted Path 


The core implements branch prediction to allow branches to issue as early as possible. This 
mechanism allows instruction prefetching to continue while an unresolved branch is being 
computed and the condition is being evaluated. Instructions fetched after unresolved 
branches are said to be fetched on a predicted path. These instructions may be discarded 
later if it turns out that the machine has followed the wrong path. To minimize power 
consumption, the MPC850 instruction cache does not initiate a miss sequence in most cases 
when the instruction is inside a predicted path. The MPC850instruction cache evaluates 
fetch requests to see if they are inside a predicted path. If a hit is detected, the requested 
instruction is delivered to the core. However, if it is a cache miss, the miss sequence is not 
initiated in most cases until the core finishes the branch evaluation. 


7.5.4 Fetching Instructions from Caching-Inhibited Regions 


The caching-inhibited/caching-allowed attributes of a memory region are programmed in 
the memory management unit (MMU). To improve performance when fetching instructions 
from caching-inhibited regions, the MPC850 loads the burst buffer with a full 4-word 
block. Instructions that are stored in the burst buffer and originate from a cache-inhibited 
region, can be sent to the instruction sequencer, at most, once before being refetched. 


[f an instruction fetch from a caching-inhibited region results in a cache hit, the instruction 
is delivered to the instruction sequencer in the core from the cache and not from memory. 
However, it is considered a programming error if an instruction fetch from a 
caching-inhibited region results in a cache hit. Software must ensure that instructions from 
a caching-inhibited region have not been previously loaded into the cache, or, if so, those 
blocks have been flushed from the cache. See Section 7.5.5, “Updating Code And Memory 
Region Attributes,” for more information. 


It is also considered a programming error to perform load & lock cache block operations 
from zero wait state devices that are located on the internal bus. The MPCS850considers 
these devices as caching-inhibited memory regions. If a load & lock cache block operation 
is performed from such a device, the instruction is not guaranteed to be fetched from the 
instruction cache; in most cases, the instruction is fetched from the device, regardless of 
whether it is in the instruction cache. 
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7.5.5 Updating Code And Memory Region Attributes 


The instruction cache does not perform snooping, so if a processor modifies a memory 
location that may be contained in the instruction cache, software must ensure that such 
memory updates are visible to the instruction fetching mechanism. Also, whenever the 
memory/cache attributes of any memory region are changed, it is critical that the cache 
contents reflect the new attributes. Therefore, when updating code or changing memory 
region attributes (in the MMU) the user must perform the following steps: 


1. Update code/change memory region attributes 

Execute a sync instruction to ensure the update/change operation finished 
Unlock all locked cache blocks containing code that was updated 
Invalidate all cache blocks containing code that was updated 


Execute an isync instruction 


7.6 Data Cache Operation 


When the data MMU is enabled (MSR[DR] = 1), the data cache operates as defined by the 
memory/cache access attributes. When the data MMU is disabled (MSR[DR] = 0), the data 
cache operates as defined by the default data memory access attributes. The default state of 
the write-through/write-back attribute is determined by MD_CTR[WTDEF]; the 
caching-inhibited/caching-allowed attribute is determined by MD_CTR[CIDEF]; and the 
entire memory space defaults to the guarded attribute. See Chapter 8, “Memory 
Management Unit,” for more information. 


A data cache access begins with a load or store request from the load/store unit (LSU) in 
the core. The data cache has a 32-bit data path to and from the load/store unit, allowing for 
a 4-byte transfer per cycle. As shown in Figure 7-2, bits 23—27 of the data address provide 
the index to select a set (0-31) within the data cache array. The tags from both ways of the 
set are compared against bits 0-22 of the data address. If a match is found and the matched 
entry is valid, then it is a cache hit. If neither tag matches or the matched tag is not valid, it 
is a cache miss. 


The data cache operates in both write-through and write-back modes as programmed by the 
memory/cache access attributes. These modes affect store hit and store miss behavior of the 
data cache. Load hits and load misses behave the same regardless of the 
write-through/write-back mode. If two logical blocks map to the same physical block, it is 
considered a programming error for them to specify different cache write policies. 


Each data cache block contains two state bits that implement a_ three-state 
(modified-valid/unmodified-valid/invalid) protocol. The MPC850 does not support 
snooping of the data cache. All memory is considered to have memory coherency not 
required attributes. Therefore, software must maintain data cache coherency. The 
MPC850does not provide support for snooping external bus activity. All coherency 
between the internal caches and external agents (memory or I/O devices) must be controlled 
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by software. In addition, there 1s no mechanism provided for DMA or other internal masters 
to access the data cache directly. 


The MPC850 data cache includes the following operational features: 
e Single-cycle cache access on hit and one clock latency added for miss 
e The data cache supports hits under load misses 
e 1-word store buffer 
e Store misses bypass the data cache (no-allocate store miss) in write-through mode 


e 4-word copyback buffer holds replaced modified cache blocks until they can be 
written to memory 


¢ Cache operation is blocked until the cache block is written to the cache array for 
store misses in write-back mode, 


e The data cache supports the sync instruction through a cache pipe clean indication 
to the core. 


7.6.1 Data Cache Load Hit 


In the case of a data cache load hit, the requested word is transferred to the load/store unit. 
The LRU state of the set is updated, but the state bits remain unchanged.The access time 
for a data cache load hit is one clock cycle (that is, zero wait states). 


7.6.2 Data Cache Read Miss 


In the case of a data cache load miss, a block in the cache array is selected to receive the 
data from memory. The selection algorithm gives first priority to invalid blocks. If both 
blocks in the set are marked invalid, the block in way 0 is selected. If neither of the two 
blocks in the selected set are invalid, then the least recently used block is selected for 
replacement. If the replacement block is marked modified-valid, then it is temporarily 
stored in a copyback buffer to be written to memory later. Locked cache blocks are never 
replaced. 


After a cache block has been selected, the word-aligned physical address of the requested 
data is sent to the SIU with a 4-word burst transfer read request. The SIU arbitrates for the 
bus and initiates the burst read. The transfer begins with the aligned word containing the 
requested data (critical word first), followed by the remaining words of the cache block (if 
any), then by any remaining words at the beginning of the block (wrap-around). 


The critical word is simultaneously written to the burst buffer and forwarded to the 
load/store unit, thus minimizing stalls due to cache fill latency. The data cache is not 
blocked to internal accesses while the load (caused by a cache miss) completes. This 
functionality is sometimes referred to as ‘hits under misses, because the cache can service 
a hit while a cache miss fill is waiting to complete. If no bus errors are encountered during 
the 4-word cache block load, the burst buffer is written to the cache array (provided the 
cache array is not busy servicing a hit) and the cache block is marked unmodified-valid. 
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If a bus error is encountered while loading the requested data (the critical word), then a 
machine check exception is generated. If a bus error occurs while loading subsequent words 
in the cache block, then the cache block is marked invalid. 


After the cache block with the requested data has been loaded from memory, the 
modified-valid cache block in the copyback buffer is sent to the SIU to be written to 
memory. If a bus error is encountered during the copyback, a machine check exception is 
generated (the copyback error is an imprecise exception). The address and data in the 
copyback buffer can be read as specified in Section 7.3.2.1, “Reading Data Cache Tags and 
Copyback Buffer.’ 


7.6.3 Write-Through Mode 


In write-through mode, store operations always update memory. The write-through mode 
is used when external memory and internal cache images must always agree. Write-through 
mode provides a lower worst case exception latency at the expense of average performance 
(for example, if it does not have to perform flush accesses). 


7.6.3.1 Data Cache Store Hit in Write-Through Mode 


In the case of a data cache store hit in write-through mode, the data is written into both the 
cache block and to memory. The LRU state of the set is updated, but the state bits remain 
unchanged. If a bus error is encountered during the write operation to memory, the cache 
block is still updated, but a machine check exception is generated. 


7.6.3.2 Data Cache Store Miss in Write-Through Mode 


In the case of a store miss in write-through mode, the data is only written to memory, not 
to the data cache. This is sometimes referred to as a‘no-allocate’ store miss because the data 
cache does not allocate a cache block in the cache array for the missed store operation. The 
state and LRU bits remain unchanged. If a bus error is encountered during the write 
operation to memory, a machine check exception is generated. 


7.6.4 Write-Back Mode 


In write-back mode, store operations do not necessarily update external memory. Data is 
only copied to external memory when a copyback operation is required (or the cache is 
deliberately flushed). For this reason the write-back mode is the preferred mode of 
operation when it is necessary to minimize external bus utilization and as a side effect, 
reduce operational power consumption. 


7.6.4.1 Data Cache Store Hit in Write-Back Mode 


In the case of a data cache store hit in write-back mode, the cache operation depends on the 
state bits of the cache block. If the store hit is to a modified-valid cache block, then data 1s 
stored in the cache block and the block stays marked modified-valid. If the store hit is to a 
unmodified-valid cache block, then data is stored in the cache block and the block is marked 
modified-valid. In either case, the LRU state of the set is updated to reflect the hit. 
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7.6.4.2 Data Cache Store Miss in Write-Back Mode 


In the case of a data cache store miss in write-back mode, the data cache must establish the 
block in the cache array before modifying that block. Therefore, a block 1n the cache array 
is selected to receive the data from memory and from the load/store unit. The selection 
algorithm gives first priority to invalid blocks. If both blocks in the set are marked invalid, 
the block in way 0 is selected. If neither of the two blocks in the selected set are invalid, 
then the least recently used block is selected for replacement. If the replacement block is 
marked modified-valid, then it is temporarily stored in the copyback buffer to be written to 
memory later. Locked cache blocks are never replaced. 


After a cache block has been selected, the word-aligned physical address of the store data 
is sent to the SIU with a 4-word burst transfer read request. The SIU arbitrates for the bus 
and initiates a burst read. The transfer begins with the aligned word containing the 
requested data (critical word first), followed by the remaining words of the cache block (if 
any), then by any remaining words at the beginning of the block (wrap-around). As the 
critical word is received from the internal bus, it is merged in the burst buffer with the store 
data from the load/store unit. If no bus errors are encountered during the burst buffer fill 
operation, the cache block is written into the cache array and marked modified-valid. The 
data cache does not support further requests until the entire block is written to the cache 
array. If the machine has stalled waiting for the store to complete, execution is allowed to 
resume when the cache block is written into the cache array. 


If a bus error is encountered while loading the target data cache block, even on a word not 
accessed by the load/store unit, then the cache block is not modified, and a machine check 
exception is generated. 


After the cache block with the requested data has been loaded from memory, the cache 
block in the copyback buffer is sent to the SIU to be written to memory. The data cache can 
support further requests, as long as they hit in the cache, while performing the copyback to 
memory. If a bus error is encountered during the copyback, a machine check exception is 
generated (the copyback error is an imprecise exception). The address and data in the 
copyback buffer can be read as specified in Section 7.3.2.1, “Reading Data Cache Tags and 
Copyback Buffer.” 


7.6.5 Data Accesses to Caching-Inhibited Memory Regions 


For load misses to caching-inhibited memory regions, the data is read from memory but not 
placed in the cache and the cache status is not affected. 


For store misses to caching-inhibited memory regions, the data is written to memory but 
not placed in the cache and the cache status is not affected. 


It is considered a programming error if a load, store, or dcbz targeting a caching-inhibited 
memory region results in a cache hit. The PowerPC architecture allows the result of such 
programming errors to be boundedly undefined. Software must ensure that data from a 
caching-inhibited regions have not been previously loaded into the data cache, or, if they 
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have, that those blocks have been flushed from the cache. Whenever the memory/cache 
attributes of any memory region are changed (for example, from caching-allowed to 
caching-inhibited), it is critical that the cache contents reflect the new attributes. Therefore, 
when changing memory region attributes (in the MMU) the user must perform the 
procedures described in Section 7.5.5, “Updating Code And Memory Region Attributes.’. 


7.6.6 Atomic Memory References 


The PowerPC architecture defines the Load Word and Reserve Indexed (Iwarx) and the 
Store Word Conditional Indexed (stwex.) instructions to provide an atomic update function 
for a single, aligned word of memory. These instructions can be used to develop a rich set 
of multiprocessor synchronization primitives. For detailed information on_ these 
instructions, refer to Section 5.2.4.6, “Memory Synchronization Instructions—UISA,” in 
this book and Chapter 8, “Instruction Set,” in The Programming Environments Manual. 


The Iwarx instruction performs a load word from memory operation and creates a 
reservation for the 16-byte section of memory that contains the accessed word. The 
reservation granularity is 16 bytes. The lwarx instruction makes a nonspecific reservation 
with respect to the executing processor and a specific reservation with respect to other 
masters. This means that any subsequent stwex. executed by the same processor, regardless 
of address, will cancel the reservation. Also, any bus write operation from another 
processor to an address that matches the reservation address will cancel the reservation. 


The stwex. instruction does not check the reservation for a matching address. The stwex. 
instruction is only required to determine whether a reservation exists. The stwex. 
instruction performs a store word operation only if the reservation exists. If the reservation 
has been cancelled for any reason, then the stwex. instruction fails and clears the CRO[EQ] 
bit in the condition register. The architectural intent is to follow the lwarx/stwex. 
instruction pair with a conditional branch which checks to see whether the stwex. 
instruction failed. | 


Note that atomic memory references constructed using lwarx/stwex. instructions depend 


- on the presence of a coherent memory system for correct operation. These instructions 


should not be expected to provide atomic access to noncoherent memory. Since the 
MPC850 does not snoop external bus activity, provision is made to cancel a reservation 
inside the MPC850 by using the CR and KR input signals. The state of the reservation is 
always presented onto the RSV output signal. This can be used by external agents to 
determine when an internal condition has caused a change in the reservation state. See 
Section 13.4.9, “Memory Reservation,’ for more information. Internal to the MPC850, the 
data cache has snoop logic to monitor the internal bus for communication processor module 
(CPM) accesses of the address associated with the last lwarx instruction. 





If a memory region is marked caching-allowed, the MPC850 assumes that it is the single 
master in the system to that region. If a caching-allowed Iwarx or stwex. access misses in 
the data cache, the transaction on the internal and external buses do not have a reservation. 
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If the memory region is marked caching-inhibited or the cache is locked, and the access 
misses, then the Iwarx instruction appears on the bus as a single-beat load with the 
reservation. 


Iwarx and stwex. accesses to write-through memory regions do not generate DSI 
exceptions. The MPC850’s data cache treats all stwex. operations as write-through 
independent of the memory/cache access attributes. When the write-through operation 
completes successfully on the external bus, then the data cache entry is updated (assuming 
it hits), and CRO[EQ] is modified to reflect the success of the operation. If the reservation 
is not intact, the stwex. cancels the external bus transaction, and the cache block is not 
altered. 


7.7 Cache Initialization after Reset 


At power-on and hard reset, both caches are disabled. Although disabled, the cache state is 
preserved to enable the user to investigate the exact state of the cache prior to the event that 
caused the reset. To ensure proper operation after reset, initialize the instruction cache by 
performing the following: 
1. Write the unlock all command (IC_CST[CMD] = 0b101) to the IC_CST register 
2. Write the invalidate all command IC_CST[CMD] = 0b110) to the IC_CST register 


3. Write the cache enable command (IC_CST[CMD] = 0b001) to the IC_CST register 


Similarly, to ensure proper operation after reset, initialize the data cache by performing the 
following: 
1. Write the unlock all command (DC_CST[CMD] = 0b1010) to the DC_CST register 
2. Write the invalidate all command (DC_CST[CMD] = 0b1100) to the DC_CST 
register 


3. Write the cache enable command (DC_CST[CMD] = 0b0010) to the DC_CST 
register 


After the caches are initialized, all the cache blocks are invalidated, and the LRU bits point 
to way 0 of each set. 


7.8 Debug Support 


The MPC850 can be debugged either in debug mode or by a software monitor debugger. In 
both cases the core of the MPC850 asserts the internal freeze signal. See Chapter 36, 
“System Development and Debugging,” for a detailed description of the MPC850 debug 
support. 


7.8.1 Instruction and Data Cache Operation in Debug Mode 


The development system interface of the MPC850uses the development port, which is a 
dedicated serial port. The development port is a relatively inexpensive interface that allows 
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a development system to operate in a lower frequency than the core’s frequency and 
controls system activity when the core is in debug mode. See Section 36.3, “Development 
System Interface,’ for more information. 


When the MPC850 is in debug mode, all instructions are fetched from the development 
port, regardless of the address generated by the MPC850 core. Therefore, the instruction 
cache is bypassed when the MPC850 is in debug mode. In addition, the data cache is frozen 
in debug mode. Loads and stores in debug mode always target system memory, regardless 
of whether the accessed data is resident in the data cache. The only way to access the 
contents of the instruction or data cache in debug mode is by using the IC_DAT or DC_DAT 
registers. 


7.8.2 Instruction and Data Cache Operation with a Software Monitor 
Debugger 

With debug mode disabled, a software monitor debugger can use the development support 

registers to assert the internal freeze signal during run-time. See Section 36.4, “Software 

Monitor Debugger Support,” for more information. 


When the internal freeze signal is asserted during run-time, the instruction cache treats all 
misses as if they were from cache-inhibited regions. Misses are loaded only into the burst 
buffer; hits are loaded from the cache array and the LRU bits are updated. If the debug 
routine is not in the instruction cache, it is loaded from memory like any other miss and the 
cache state remains the same as before the freeze signal was asserted. 


For performance reasons, it may be preferable to run the debug routine from the cache. To 
load the debug routine into the instruction cache before entering debug mode, perform the 
following procedure: 


1. Save both ways of the sets that are needed for the debug routine by reading the tag, 
the LRU, valid, and lock bit states 


2. Unlock the locked ways in the selected sets 


3. Use the load & lock cache block command to load the debug routine into the 
instruction cache and lock the cache blocks containing the debug routine. 


4. Run the debug routine, all accesses to it will result in hits. 
To restore the state of the instruction cache after the debug routine is finished, perform the 
following procedure: 

1. Unlock any ways in any sets that are used by the debug routine 


1. Invalidate any ways in any sets that are used by the debug routine 


SS 


Use the load & lock cache block command to restore the old sets in the cache array 
3. Unlock any ways of the original sets that were not previously locked 


4. To restore the old state of the LRU bits make sure that the last access (load& lock 
cache block or unlock cache block command) is performed on the most-recently 
used way (not the LRU way). | 
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When the internal freeze signal is asserted during run-time, the data cache treats all load 
misses as if they were from cache-inhibited regions. That is, the data is loaded from 
memory and the cache LRU and state bits are unchanged. Load hits are serviced from the 
cache array but the cache LRU and state bits are unchanged. 


When the internal freeze signal is asserted, store hits and misses are treated as 
write-through accesses, but the LRU bits in the data cache array are not updated. For the 
dcbz instruction, data is written both into data cache and memory, but the LRU bits in the 
data cache array are not updated. For the dcbst/dcbf/dcbi instructions, the data cache and 
memory are updated according to the PowerPC architecture, but the LRU bits in the data 
cache array are not updated. 
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Chapter 8 
Memory Management Unit 


The MPC850 implements a virtual memory management scheme that provides cache 
control, memory access protections, and effective-to-physical (real) address translation. 
The MMU largely complies with the PowerPC operating environment architecture (OEA) 
with respect to architecturally defined memory management features that are appropriate 
for this implementation. It does not support some PowerPC MMU features more 
appropriate for a personal computer that is expected to run many applications 
simultaneously, and in some cases provides greater flexibility than is defines by the 
PowerPC architecture, especially with respect to page sizes. Available protection 
granularity is 4-, 16-, 512-Kbyte, or 8-Mbyte pages or 1-Kbyte subpages (for 4-Kbyte 
pages only). The MPC850 has separate instruction and data MMUs. The prefix Mx_ 
indicates a reference to both the instruction and data (MI_ and MD_) versions of the 
register. The MMU supports two protection modes—PowerPC mode with extended 
encoding and domain manager mode, which provides programmable overrides to page 
protection settings. 


8.1 Features 
The following is a list of the MMU’s important features: 


¢ Multiple page sizes—4-, 16-,512-Kbyte, or 8-Mbyte pages (optional 1-Kbyte 
subpage protection granularity for 4-Kbyte pages) with the following page 
attributes: 


— Changed bit support through the DTLB error exception on a write attempt to a 
unmodified page (data MMU only) 


— Write-through attribute for data accesses. 
— Cache-inhibit attribute for data and instruction accesses. 


— Default write-through and cache-inhibited attributes can be programmed for 
when translation is disabled. 


— Guarded attribute for memory-mapped J/O and other nonspeculative regions 
e Instruction and data address translation can be disabled separately. 


¢ MPC850-specific special-purpose registers (SPRs) accessible with the PowerPC 
mfspr/mtspr instructions. 
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e Supports up to 16 virtual address spaces 
e Supports 16 access protection groups (group protection overrides page protection) 


e Separate 8-entry, fully-associative data translation lookaside buffer (DTLB) and 
instruction TLB (ITLB) with the following features: 


— Implementation-specific exceptions —ITLB and DTLB miss exceptions, ITLB 
and DTLB error exceptions 


— Supports PowerPC tlbie and tlbia instructions. The tlbsynce instruction, which is 
optional to PowerPC implementations, is not supported and is treated as a no-op. 


— Software tablewalk updates supported by DTLB and ITLB miss exceptions and 
SPRs 


— Each entry can be programmed to match user or supervisor accesses or both. 


— Two entries in each TLB can optionally be locked to ensure fast translation for 
selected regions. 


e High performance 


— 1 clock (zero wait state) access for a data cache hit and for an instruction cache 
hit when the access is from the same page as the previous access 


— 1 clock penalty for other TLB hit instruction accesses 


¢ Low power consumption 


8.2 PowerPC Architecture Compliance 
The MPC850 core complies largely with the MMU as it is defined by the OEA, with the 
following differences: 
e The MPC850 does not implement the following PowerPC features: 
— Block-address translation 
— The optional direct-store functionality 
— The memory coherency attribute 


e The MPC850 supports the following additional features not defined by the PowerPC 
architecture: 


— Variable page sizes. The OEA defines 4-Kbyte pages only 


— Programmable defaults for write-through and cache-inhibited memory attributes 
when translation is disabled. 


— Additional registers and exceptions for handling table walks in software. 


Note that although the MPC850 does not define segment registers as they are defined by the 
OEA, the concept of segment is retained as the memory space accessible to the level-one 
table descriptors. | 
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8.3 Address Translation 


The core generates 32-bit effective addresses (EA) for memory accesses. Setting MSR[IR] 
and MSR[DR] enables the effective-to-real translation for instruction fetching and data 
accesses, respectively. Section 8.3.1, “Translation Disabled,’ describes behavior when 
translation is disabled. Section 8.3.2, “Translation Enabled;’ describes behavior when 
translation is enabled. 


8.3.1 Translation Disabled 


Because the IMMU and DMMU are separate, translation can be disabled or enabled 
independently for data and instruction accesses by clearing MSR[DR] and MSR[IR], 
respectively. When translation is disabled, the effective address is also the physical address. 


Because the page translation mechanism is not used, the protection attributes that are part 
of the page table structure cannot be used, so defaults are used. The default for whether 
accesses are cache-inhibited are programmed through Mx_CTR[CIDEF]. Data accesses 
can be either write-through (memory writes go both to the cache and to external memory) 
or write back (memory writes directly affect the cache only and memory is updated 
indirectly, such as when a modified data in the cache is cast-out by newer data at a different 
address that maps to the same cache block). The default is configured by 
MD_CTR[WTDEF]. 


Also, when translation is disabled (real mode), the entire memory space is treated as 
guarded by default. The implications of this are: 


1. Speculative load/store accesses are stalled until they are no longer speculative. 


2. Speculative instruction fetches outside of the current real-mode page are stalled until 
they are no longer speculative. The size of real-mode page 1s determined by 
MI_CTR[PPM]. If MI_CTR[PPM] = 0, the real-mode page size is 4 Kbytes; if 
Mi_CTR[PPM] = 1, the real-mode page size is 1 Kbyte. 


This behavior can result in significant performance degradation. 


8.3.2 Translation Enabled 


Translations are generated on a per-page basis and are stored in tables in memory. Along 
with the translation, each table entry holds attributes for that page, for example, whether a 
location is cacheable. 


Recently used translations are kept in translation lookaside buffers (TLBs) in hardware. In 
the MPC850, software handles the table lookup and TLB reload with little hardware 
assistance. This offers a flexible translation table structure choice, because many systems 
would not benefit from a full-featured hardware translation mechanism. 


A TLB hit in multiple entries is avoided when a TLB is being reloaded. When TLB logic 
detects that a new effective page number (EPN) overlaps one in the TLB (when taking into 
account pages sizes, subpage validity flags, user/supervisor state, address pace ID (ASID), 
and the SH values of the TLB entries), the new EPN is written and the old one is invalidated. 
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The MMU supports a multiple virtual address space model. Each translation is associated 
with an ASID, which must equal the address space ID (CASID) for a translation to be valid. 


Figure 8-1 shows the flow for a read access or instruction fetch. 


Data/Instruction Fetch 


32-bit EA is generated 


Yes = 
Use current page description 











Same page 
(Fast TLB Hit) 
? 










No 


Compare address 
with TLB (1 clock penalty) 
Entries 





Is page 
a = ee ee TLB error exception 


7 


No Yes 






TLB reload (read page 





Access permitted No 


by page protection 
? 


description from external 
memory to TLB) 

















(20-23 clock penalty Yes 
@ one wait-state 


external memory) (‘Use page description from TLB 


Figure 8-1. Read/Instruction Fetch Flow Diagram 


Figure 8-2 shows the flow for a load/store access, assuming translation is enabled. Because 
data transfers have less locality than instruction fetches, the DMMU does not implement a 
fast TLB mechanism. The DTLB is accessed for each transfer simultaneously with the data 
cache tag read, hence there is no time penalty. 
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Data/Instruction Fetch 


32-bit EA is generated 



















Compare address 
with TLB (0 clock penalty) 
entries 
Yes ee No 





valid TLB error exception 


? 









TLB reload (read page 
description from external 
memory to TLB) 


(20-23 clock penalty 
@ one wait-state 
external memory) 





Access permitted No 


by page protection 
? 
















Yes 


Use page description from TLB 


Figure 8-2. Flow of Load/Store Access 





8.3.3 TLB Operation 


Each TLB contains pointers to pages in physical memory where data is indexed by the EPN. 
TLBs entries can have different page sizes. The entry page size determines which EA bits 
are compared and how many of its Isbs pass untranslated as physical address bits. 


For a 4-Kbyte page, four subpage validity flags are supported, allowing any combination of 
1-Kbyte subpages to be mapped. For any other page size, all of these flags should have the 
same value. Programming non-4-Kbyte pages with different valid bits is a programming 
error. Subpage validity flags can be manipulated to implement 1—4 Kbyte pages or any other 
combination of 1-Kbyte subpages. However, all subpages of an effective page frame must 
map to the same physical page. During translation, the EA, the privilege level (MSR[PR]), 
and CASID are provided to the TLB, as shown in Figure 8-3. In the TLB, the EA and 
CASID are compared with each entry’s EPN and ASID. The CASID is compared only 
when the matching entry is programmed as unshared. See Table 8-11 and Table 8-12. 
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MSRIPR] M_CASID[CASID]  32-Bit EA 
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32-Bit Logical 
Address 
lop Implementation- 
Specific TLB 
Page Protection Miss Exceptions 
32-Entry Fully Associative TLB : to Core 
Free Access 
Protection ; 
Group Number Implementation- 
Physical Page Number Byte Specific 
| | No Access Error Exceptions 
| to Core 














Protection 
Lookup Table 


Translation Translation 
Enabled Enabled 











Exception 
Logic 





32-Bit Physical Address 


Figure 8-3. Effective-to-Physical Address Translation for 4-Kbyte Pages Block 
Diagram 


A TLB hit occurs if the incoming EA matches the EPN and M_CASID[CASID] matches 
the ASID field in a valid TLB entry, and if the subpage validity flag is set for the subpage 
that the incoming EA points to. If a hit is detected, the contents of the physical page number 
are concatenated with the appropriate number of Isbs from the EA to form the physical 
address sent to the cache and memory system. 


8.4 Using Access Protection Groups 


Access control is assigned on a page-by-page basis; additional control is provided on a 
protection group basis. Each TLB entry holds an access protection group (APG) number. 
When a match is detected, the value of the matched entry’s APG is used to index a field in 
the access protection register (MI_AP or MD_AP) that defines access control for the 
translation. Each Mx_AP contains 16 fields. The field content is used according to the group 
protection mode. 


To be consistent with the PowerPC OEA, the APG value should match the four msbs of the 
effective page number. To override protection using APG, use it on blocks of addresses 
which are defined by the 4 msbs of the effective page number. If APG is not to be used for 
a particular block, set the GP for that block to ‘client’ in the Mx_AP register. To ignore it 
globally, set all of the Mx_AP fields to 01. In PowerPC mode, each field holds the Kp and 
Ks bits for the corresponding segment defined by the level-one table descriptor. In domain 
manager mode, each field holds override information over the page protection setting —no 
override, no access override, and free access override. 
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8.5 Protection Resolution Modes 


The MMUs can be programmed in three different modes that different methods of defining 
the protection resolution of the address space. These are as follows: 


e Mode 1 —Protection resolution to 4-Kbyte minimum page size. This is the simplest 
mode with the most efficient memory size (that is, MMU tables are smaller). Use 
this mode if 1-Kbyte protection resolution is not required. 





In this mode, set the following: 


— MD_CTR[TWAM] = 1 

— Mx_CTR[PPM] =0 

— Bits 20—27 of the level-two descriptor take on the meaning described in the right 
side of Table 8-4. 


¢ Mode 2—Protection resolution to 1-Kbyte minimum subpage size, where all 
4-Kbyte subpages map to the same physical page but may have different protection 
attributes. 


In this mode, set the following: 


— MD_CTR[TWAM]=1 
— Mx_CTR[PPM]=1 


For pages larger than 4 Kbytes, bits 20-27 of the level-two descriptor take on the 
meaning described in the right side of Table 8-4 


For 4-Kbyte pages, set the subpage validity flags (bits 20-27) to subpage protection 
mode for 4 subpages; see Table 8-4. In this mode, the MMU page tables defined for 
the software tablewalk resolve to a single level-two descriptor entry for a 4-Kbyte 


page. 


Page protection (and thus level-two descriptor entries) for pages larger than 4-Kbyte 
is the same as for mode 1, described above. However, for 4-Kbyte pages, the 
level-two descriptor encoding has special meaning. The level-two descriptor defines 
a 4-Kbyte page in physical memory, but each 1-Kbyte of that page can be defined 
with different protection attributes. 


This mode is just as efficient in memory size as mode 1, but the protection encoding 
and capabilities for 4-Kbyte pages differ. 


e Mode 3—Protection resolution to 1-Kbyte minimum subpage size, with no 
restriction on subpage mapping. In this mode, set: 
— MD_CTR[TWAM] = 0 
— Mx_CTR[PPM] =0 
— Mx_CTR[PPCS5] = 0 
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For pages larger than 4-Kbyte, set subpage validity flags (bits 24-27) of the level-two 
descriptor (and thus Mx_RPN) to 0b1111. 


For 4-Kbyte pages, there are four separate entries with different encodings of 
subpage validity flags (bits 24—27) of the level-two descriptor (and thus Mx_RPN) 
allowable for each entry. 


For 4-Kbyte pages, the subpage validity flags (bits 24-27) of the level-two 
descriptor (and thus Mx_RPN) can be different for each of the four separate entries. 


In this mode, the MMU page tables defined for the software tablewalk resolve to a 
single level-two descriptor entry for a 1-Kbyte page. This is done by allowing 
manipulation of the subpage validity flags of a 4-Kbyte page. For example: 


— To define a 4-Kbyte page with uniform protection, create four level-two 
descriptors for the 4-Kbyte page, each with subpage validity flags set to Ob1111. 
All other fields of the level-two descriptors must also be the same for each of 
these entries. | 


— To define four different 1-Kbyte pages, create four level-two descriptors, but set 
the subpage validity flags such that: entry one = 0b1000, entry two = 0b0100, 
entry three = 0b0010, entry four = Ob0001. All other fields of the level-two 
descriptor can be set differently for each of these entries. 

— To define two different 2-Kbyte pages, create four level-two descriptors, but set 
the subpage validity flags in pairs such that: entry one = 0b1100, entry two = 
0b1100, entry three = 0b0011, entry four = O0b0011. The other fields of the 
‘paired’ level-two descriptors must be the same for each of the pairs. 


Other combinations are also possible. 
This mode is the most complex and the most inefficient in memory size (that is, 


MMU tables are approximately four times larger). However, it allows the most 
detailed resolution of protection with full functionality. 


IMMUs and DMMUs can use different modes; the IMMU could use mode 1 and the 
DMMU could use mode 2, or vice versa. However, if mode 3 is desired, both MMUs must 
be in mode 3. 


8.6 Memory Attributes 


Memory attributes defined by the PowerPC architecture are implemented as follows: 


¢ Reference and change bit updates — The MPC850 does not generate an exception for 
an R (reference) bit update. In fact, there is no entry for an R bit in the TLB. 


The change bit (C) is bit 23 in the level-two descriptor, described in Table 8-4. 
Software updates C (changed) bits, but hardware treats the C bit (negated) as a 
write-protect attribute. Therefore, attempting to write to a page marked unmodified 
invalidates that entry and causes an implementation-specific DTLB error exception. 
If change bits are not needed, set the C bit to one by default in the PTEs. 
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e Memory control attributes — The MPC850 supports cache inhibit (CI), writethrough 
(WT), and guarded (G) attributes, defined in the PowerPC Virtual Environment 
Architecture (VEA). The memory coherence (M) attribute is not supported; to 
ensure memory coherency, configure the page as cache-inhibited. Chapter 7, 
“Instruction and Data Caches,’ describes the effects of CI and WT attributes in the 
MPC850. 


The G attribute is used to map I/O devices that are sensitive to speculative 
(out-of-order) accesses. An attempted speculative access to a page marked guarded 
(G = 1) stalls until either the access is nonspeculative or is canceled by the core. 
Attempting to fetch from guarded memory causes an implementation-specific 
instruction TLB error interrupt. 





8.7 Translation Table Structure 


The MMU hardware supports a two-level software tablewalk. Other table structures are not 
precluded. Figure 8-4 shows the two-level translation table when MD_CTR[TWAM] = 1 
(4-Kbyte resolution of protection). 
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Effective Address 
19 20 


0 | 19 0 9 10 31 
- Level-1 Table Pointer (M_TWB) Level-1 index Level-2 Index ~ Page Offset 


20-Bit 10-Bit 





Level-1 Table Base _ Level-1 Index 00 | 


20-Bit Level-1 Table a 


10-Bit 
Level-1 Descriptor 0 


12 for 4 Kbyte 
Level-1 Descriptor 1 14 for 16 Kbyte 
A40-Bit 19 for 512 Kbyte 


Level-1 Descriptor N 23 for 8 Mbyte 
Level-1 Descriptor 1023 | 


















20-Bit 
A 














Level-2 Table Base Level-2 Index 00 | 


10-Bit 







Level-2 Table 


Level-2 Descriptor 0 


Level-2 Descriptor 1 


20-Bit 














20 for 4 Kbyte 
18 for 16 Kbyte 
13 for 512 Kbyte 
9 for 8 Mbyte 








Level-2 Descriptor 1023 














Physical Page Address Page Offset 


Physical Address 
Figure 8-4. Two-Level Transiation Table (MD_CTR[TWAN] = 1) 


When MD_CTR[TWAM] = 1, the tablewalk begins at the level-one base address in 
M_TWB. EA[0-9] indicates the level-one page descriptor. As shown in Table 8-1, an 


8-Mbyte page requires two identical entries in the level-one table, one for bit 9 = 0 and one 
for bit 9 = 1. 
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Table 8-1. Identical Entries Required in Level-One/Level-Two Tables 


Identical Entries Required in Level-One Table Identical Entries Required in Level-Two Table 
Page Size 
MD_CTR[TWAN] = 0 MD_CTR[TWAN] = 1 MD_CTR[TWAM] = 0 MD_CTR[TWAN] = 1 
1 











[ MD-cTerTwaa=1 | WO_CTRCTWAN]=0 | WD_CTRCTWAN}=1 





The page size and the level-two base address are read from the level-one descriptor. If the 
page size is 512 Kbytes or 8Mbytes, the level-two base address is used directly as the 
address of the level-two descriptor. If the page size is less than 512 Kbytes, the address of 
the level-two descriptor is determined by indexing the level-two base address by 
EA[10-19]. For 16 Kbyte pages, this requires that multiple identical level-two descriptors 
be provided. This is summarized in Table 8-1. 


Figure 8-5 shows the two-level translation table when MD_CTR[TWAM] = 0 (1 Kbyte 
resolution of protection). 
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Effective Address 
0 11 12 21 22 31 


0 - 17 
Level-1 Table Pointer (M_TWB) Level-1 Index - Level-2 Index Page Offset 


18-Bit 12-Bit 


Level-1 Table Base | Level-1 Index 00 ’ 


18-Bit Level-1 Table 772Bi | 


Level-1 Descriptor 0 12 for 1 Kbyte 
Level-1 Descriptor 1 12 for 4 Kbyte 


A 40-Bit J 14 for 16 Kbyte 
19 for 512 Kbyte 
Level-1 Descriptor N 23 for 8 Mbyte 


Level-1 Descriptor 4095 


Level-2 Table Base Level-2 Index 00 | 


Level-2 Table 10-Bit 


Level-2 Descriptor 0 


Level-2 Descriptor 1 


Level-2 Descriptor N 
Level-2 Descriptor 1023 


Physical Page Address Page Offset 


Physical Address 
Figure 8-5. Two-Level Translation Table (MD_CTR[TWAMN] = 0) 


















20-Bit 
















20-Bit 





20 for 1 Kbyte 
20 for 4 Kbyte 
18 for 16 Kbyte 
13 for 512 Kbyte 
9 for 8 Mbyte 












During address translation, the msbs of the missed effective address are replaced by the 
physical page address bits from the level-two page descriptor; the page size determines the 
number of replaced bits as shown in Table 8-2. The remaining physical address bits come 
directly from the effective address. When MD_CTR[TWAM] = 0, the tablewalk begins at 
the level-one base address placed in M_TWB. The level-one table is indexed by EA[0-11] 
to get the level-one page descriptor. As shown in Table 8-1, 8-Mbyte pages must have eight 
identical entries in the level-one table for EA[9—11]. 
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Table 8-2. Number of Replaced EA Bits per Page Size 


Number of Replaced EA Bits 

















1 Kbyte 20 
L +— 
4 Kbyte 20 
16 Kbyte 18 
- 
512 Kbyte 13 
8 Mbyte 9 











The page size and the level-two base address are read from the level-one descriptor. If the 
page size is 512 Kbytes or 8Mbytes, the level-two base address is used directly as the 
address of the level-two descriptor. If the page size is less than 512 Kbytes, the address of 
the level-two descriptor is determined by indexing the level-two base address by 
EA[12—21]. For 4Kbyte or 16 Kbyte pages, this requires that multiple identical level-two 
descriptors be provided. This is summarized in Table 8-1. 


The number of replaced bits depends on the page size, as shown in Table 8-2. The 
remaining physical address bits are taken directly from the effective address. 


8.7.1 Level-One Descriptor 
Table 8-3 describes the level-one descriptor format supported by the hardware to minimize 
the software tablewalk routine. 


Table 8-3. Level-One Segment Descriptor Format 


0-19 |{L2BA |Level-2 table base address. Bits 18-19 should be 0b00 unless MD_CTR[TWAM] = 1. 


23-26 | APG | Access protection group 
27 

























Guarded memory attribute for entry 
0 Nonguarded memory 
1 Guarded memory 















28-29 |PS 


Page size level one 
00 Small (4 Kbyte or 16 Kbyte) 
01 512 Kbyte 

118 Kbyte 

10 Reserved 






Writethrough attribute for entry 
0 Copyback cache policy region (default) 
1 Writethrough cache policy region 


Level-one segment valid bit 
0 Segment is not valid 
1 Segment is valid 


— 
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8.7.2 Level-Two Descriptor 
Table 8-4 describes the level-two descriptor format supported by hardware. 


Table 8-4. Level-Two (Page) Descriptor Format 






4-Kbyte Pages AND 
Mx_CTR[PPN] = 1 


Larger than 4-Kbyte Pages OR 
Mx_CTR[PPM] = 0 











Physical (real) page number - 



















Protection {For Instruction Pages For Instruction Pages For Data Pages 








































for 1st Supervisor User Supervisor User Supervisor User 
1-Kbyte 00 No access No access | Extended encoding: Extended encoding: 
subpage in |01 Executable No access |00 No access No access 00 No access No access 
a 4-Kbyte 1x Executable Executable |01 Executable No access 01 R/O No access 
page For Data Pages 1x Reserved 1x Reserved 
Supervisor User PowerPC encoding: PowerPC encoding: 

00 No access No access }00 Executable No access 00 R/W No access © 

01 R/W No access |01 Executable Executable 01 R/W | RIO 

10 R/W R/O 1x Executable Executable 10 R/W R/W 

11 R/W R/W 11 R/O R/O 








0 Bits 20-21 contain PowerPC encoding » 
1 Bits 20-21 contain extended encoding 


2nd 
1-Kbyte 
subpage 


3rd 1-Kbyte 
subpage 


4th 1-Kbyte 
subpage 







C—Change bit for entry. Set to 1 by default if change 
tracking functionality is not desired. 

0 Unchanged region (write-protected) 

| 1 Changed region, write allowed. 


























MD_CTR[PPCS] = 0. 
For 1 Kbyte pages in 
mode 3, set to the 
appropriate subpage 
validity (see Section 8.5, 
“Protection Resolution 
Modes”). Otherwise, set to 
0b1111. 


MD_CTR[PPCS] = 1 

1000 Hit (supervisor accesses 
only) 

0100 Hit (user accesses only) » 

1100 Hit for both 


















Small page size. Valid only when L1 descriptor[PS] = 00 
O 4 Kbyte 
1 16 Kbyte 








Shared page 
0 Entry matches only if a TLB entry’s ASID field matches the value in M_CASID. 
1 ASID comparison is disabled for the entry. 


Cache-inhibit attribute for the entry. 
ist |v Page valid bit 


8.8 Programming Model 


All MMU programming model registers are supervisor-level SPRs that are accessed by 
using mtspr and mfspr. Attempting to access these SPRs in user mode causes a program 
exception. The PowerPC tlbie and tlbia instructions can be used to invalidate TLBs. MMU 
registers should be accessed when both MSRI[IR] = 0 and MSR[DR] = 0. No similar 
restriction exists for tlbie and tibia. 
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Table 8-5 lists the MPC850-specific MMU registers and indicates the sections that describe 
them. These SPRs should be accessed when both instruction and data address translation is 
disabled. 


Table 8-5. MPC850-Specific MMU SPRs 


ee 


Control Registers 
MILCTR —_{IMMU control register 
MD_CTR DMMU control register 


MI_EPN IMMU effective number register 8.8.3 


MD_RPN DMMU real (physical) page number register 


Tablewalk Assist Registers 
M_TWB | MMU tablewalk base register 


Protection Registers 
M_CASID | CASID register 8.8.9 


MI_AP IMMU access protection register 786 8.8.10 
MD_AP DMMU access protection register ae 
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8.8.1 IMMU Control Register (MI_CTR) | , 
The IMMU control register (MI_CTR), shown in Figure 8-6, controls IMMU operation. 


R/W 


RW 
784 
Figure 8-6. IMMU Control Register (MI_CTR) 










Page protection mode. Valid regardless of whether translation is enabled. If translation is 


Table 8-6 describes MI_CTR fields. 
enabled, PPM determines how Mx_RPN is interpreted. See Table 8-11 and Table 8-12. 
O Page resolution of protection 


Table 8-6. MI_CTR Field Descriptions 
i 
rf 
| 1 1-Kbyte resolution of protection for 4-Kbyte pages 
a | CIDEF Default value for instruction cache-inhibit attribute when the IMMU is disabled (MSRIIR] = 0) 


Group protection mode 
Is {= Reserved. Ignored on write. Returns 0 on read. 














BR} @| hd 


















1 
1 ITLB_INDX decremented modulo 6 
5 
PPCS __| Privilege/user state compare mode 
718 J Reserved. Ignored on write. Returns 0 on read. 
21 


O PowerPC mode 
1 Domain manager mode 
RSVva2li Reserve two ITLB entries. See Section 8.10.2, “Locking TLB Entries.” 
0 ITLB_INDX decremented modulo 8 
is |- Reserved. Ignored on write. Returns 0 on read. 
0 Ignore user/supervisor state during address compare 
1 Account for user/supervisor state according to MI_RPN[24—27] 
ITLB_INDX | ITLB index. Points to the ITLB entry to be loaded. Decremented every ITLB update 
24-31 = Reserved. Ignored on write. Returns 0 on read. 
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8.8.2 DMMU Control Register (MD_CTR) 
The DMMU control register (MD_CTR), shown in Figure 8-7, controls DMMU operation. 















0x04000000 
R/W 


0x04000000 
R/W 
792 
Figure 8-7. DMMU Control Register (MD_CTR) 


Table 8-7 describes MD_CTR fields. 


Table 8-7. MD_CTR Field Descriptions 


2  ICIDEF Cl default when the DMMU is disabled (MSR[DR] = 0) 


Group protection mode 
WTDEF __ | WT default when the DMMU is disabled (MSR[DR] = 0) 


0 PowerPC mode 
1 Domain manager mode 
4 RSV2D Reserve two DTLB entries. See Section 8.10.2, “Locking TLB Entries.” 
0 DTLB_INDX decremented modulo 8 
| |1 DTLB_INDX decremented modulo 6 
- TWAM 
PPCS 
0 Ignore user/supervisor state during address compare 
1 Account for user/supervisor state according to MD_RPN[24—27] 
7-18 |= | Reserved. Ignored on write. Returns 0 on read 


c= DTLB_INDX | DTLB index. Points to DTLB entry to be loaded. Decremented every DTLB update. 
Reserved. Ignored on write. Returns 0 on read 























Page protection mode 
0 Page resolution of protection 
1 1-Kbyte resolution of protection for 4-Kbyte pages 










| Tablewalk assist mode 
0 1-Kbyte subpage hardware assist 
1 4-Kbyte page hardware assist 







Privilege/user state compare mode 
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8.8.3 IMMU/DMMU Effective Page Number Register (Mx_EPN) 


The effective page number registers (MI_LEPN and MD_EPN), shown in Figure 8-8, 
contain the EA to be loaded into a TLB entry. 


EPN 
0000_0000_0000_0000 





” Figure 8-8. IMMU/DMMU Effective Page Number Register (Mx_EPN) 


Table 8-8 describes Mx_EPN fields. 
Table 8-8. Mx_EPN Field Descriptions 











Description 











Effective page number for TLB entry. Default value is the EA of the last ITLB/DTLB miss 


20-21 | Reserved. Ignored on write. Undefined on read 
22 EV 


TLB entry valid bit. 
O TLB entry is invalid 
1 TLB entry is valid. EV is set to 1 on each ITLB/DTLB miss. 
23-27 =| Reserved. Ignored on write. Returns 0 on read 
28-31 |ASID | Address space ID of the ITLB/DTLB entry to be compared with M_CASID[CASID]. Loaded with 
M_CASID on a TLB miss. Se | 
8.8.4 IMMU Tablewalk Control Register (MI_TWC) 


The IMMU tablewalk control register (MI_TWC), shown in Figure 8-9, contains the access 
protection group and page size of the entry to be loaded into the TLB. 
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0000_0000_0000_0000 
R/W 





Figure 8-9. IMMU Tablewalk Control Register (MI_TWC) 
Table 8-9 describes MI_TWC fields. 


Table 8-9. MI TWC Field Descriptions 
ew = 


Reserved. Ignored on write. Returns 0 on read. 
23-26 Access protection group. Up to 16 protection groups supported. Default for ITLB miss is 0 
Guarded memory attribute for entry 
118 Mbyte 


0 Nonguarded memory (default for ITLB miss) 
28-29 |PS 
10 Reserved 


1 Guarded memory 
30 f= Reserved. Ignored on write. Returns 0 on read. 


Entry valid bit 


0 Entry is not valid 

1 Entry is valid. Default value on ITLB miss. 
8.8.5 DMMU Tablewalk Control Register (MD_TWC) 
The DMMU tablewalk control register (MD_TWC), shown in Figure 8-10, contains the 
level-two pointer and access protection group of an entry to be loaded into the TLB. 































Page size level-one 
00 Small (4 or 16 Kbyte. See MI_LRPN[SPS}) Default for ITLB miss 
01 512 Kbyte 
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Figure 8-10. DMMU Tablewalk Control Register (MD_TWC) 


Table 8-10 describes MD_TWC fields. 
Table 8-10. MD_TWC Field Descriptions 













(ein Moa Se. aR = 


L2TB |} L2TB Tablewalk level-two table base value 


23-26 | APG | Access protection group. Up to 16 protection groups are 
supported. Set to 0000 on a DTLB miss. 


Guarded memory attribute of the entry: 
0 Nonguarded memory. Cleared on DTLB miss. 
1 Guarded memory 









Level-two table index. Returns 
MD_EPN[10—19] when 
MDCTRITWAN] = 1 


N 
i 
nN R 
NO 
iw 











| Returns MD_EPN[12~21] when 
MDCTR[TWANM] = 0 

















Level-one page size. (Cleared on a DTLB miss.) 
00 Small (4 Kbyte or 16 Kbyte. See MD_RPN) 
01512 Kbyte 

118 Mbyte 
10 Reserved 





Writethrough attribute for page entry: Returns 0 on read. 


0 Copyback data cache policy. Cleared on DTLB miss. 
1 Writethrough data cache policy . 


31 V O Entry is not valid Returns 0 on read. 
1 Entry is valid. (set on a DTLB miss) 


8.8.6 IMMU Real Page Number Register (MI_RPN) 


The IMMU real page number register (MI_RPN), shown in Figure 8-11, contains the 
physical address and the memory attributes of an entry to be loaded into a TLB. MI_RPN 
should be written after MI_LEPN and MI_TWC are written. 
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Figure 8-11. IMMU Real Page Number Register (MI_RPN) 
Table 8-11 describes MI_RPN fields. 
Table 8-11. Mi_RPN Field Descriptions 


4-Kbyte Pages AND : = 
MI_CTRIPPM] = 1 Greater than 4-Kbyte Pages OR MI_CTR[PPM] = 0 


Real (physical) page number 


Protection attributes for Extended Encoding: PowerPC Encoding: 








































subpages 1-4 in a 4-Kbyte Supervisor User Supervisor User 

page. 00 No access No access 00 Executable No access 
Supervisor User 01 Executable No access 01 Executable Executable 

00 Noaccess Noaccess |1x Reserved Reserved 1x Executable Executable 


01 Executable No access : 
1x Executable Executable |9 Bits 20-21 contain PowerPC encoding 
1 Bits 20-21 contain extended encoding : 


MD_CTRIPPCS] = 0 MD_CTR[PPCS] = 1 

For 1 Kbyte pages in mode 3, set to | 1000 Hit only for supervisor 
the appropriate subpage validity (see accesses 

Section 8.5, “Protection Resolution |0100 Hit only for user accesses 
Modes’). Otherwise, set to 0b1111. {1100 Hit for both 




























Small page size: Clearto0. | Small page size. Valid only when L1 descriptor[PS] = 
0 4 Kbyte 


1 16 Kbyte 








Shared page: 
0 This entry matches only if ASID field in the TLB entry matches the value M_CASID. 
1 ASID comparison is disabled for the entry. 
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8.8.7 DMMU Real Page Number Register (MD_RPN) 


The DMMU real page number register (MD_RPN), shown in Figure 8-12, contains the 
physical address and the memory attributes of an entry to be loaded into a TLB. This 
register should be written after the MD_EPN and MD_TWC registers. 





Figure 8-12. DMMU Real Page Number Register (MD_RPN) 


Table 8-12 describes MD_RPN fields. | 
Table 8-12. MD_RPN Field Descriptions 


4-Kbyte Pages AND : 7 
(MD_CTR[PPN] = 1) Greater than 4-Kbyte Pages OR MD_CTR[PPM] = 0 


Real (physical) page number | 
























Protection attributes for 
| subpages 1—4 in a 4-Kbyte 
page. 

‘Supervisor User 
00 Noaccess No access 
01 R/W No access 
10 RW. R/O 
11 R/W R/W 


Extended Encoding: 
Supervisor User 

00 No access No access 

01 R/O . No access 

1x Reserved 


PowerPC Encoding: 


Supervisor User 
No access 













11. R/O R/O 


0 Bits 20-21 contain PowerPC encoding 
1 Bits 20-21 contain extended encoding 


| Change bit for DTLB entry. Set to 1 by default if change tracking 

functionality is not desired. 

0 Unchanged region. Write access causes an IMMU exception. 
Software should take an appropriate action before setting this bit. 

1 Changed region. Write access is allowed to this page. 
















MD_CTR[PPCS]=0 | MD_CTR[PPCS] = 1 
For 1 Kbyte pages in mode 3, set to | 1000 Hit only for supervisor 

the appropriate subpage validity accesses. 

(see Section 8.5, “Protection 0100 Hit only for user accesses 
Resolution Modes”). Otherwise, set | 1100 Hit for both 
to 061111. 
























Small page size. Valid only when L1 descriptor[PS] = 00 
0 4 Kbyte 
1 16 Kbyte 


Small page size: Clear. 
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Table 8-12. MD_RPN Field Descriptions (Continued) 


4-Kbyte Pages AND 7 
(MD_CTR[PPM] = 1) Greater than 4-Kbyte Pages OR MD_CTR[PPM] = 0 


Shared page 


0 This entry matches only if the ASID field in the DTLB entry matches the M_CASID value. 
1 ASID comparison is disabled for the entry. 


Cache-inhibit attribute for the entry. 
V Entry valid indication. 





8.8.8 MMU Tablewalk Base Register (M_TWB) 


The MMU tablewalk base register (M_TWB), shown in Figure 8-13, contains a pointer to 
the level-one table to be used in hardware-assisted tablewalk mode. 





Figure 8-13. MMU Tablewalk Base Register (M_TWB) 


Table 8-13 describes MWB fields. 
Table 8-13. M_TWB Field Descriptions 


oo 

Level-one table index. Ignored on write. Returns MD_EPN[0-9] on read when MD_CTRITWAN] = 
1. Returns MD_EPN[2—11] on read when MD_CTR[ITWAN] = 0 

fo-s1 [= |Fesened redone tire Donre 


8.8.9 MMU Current Address Space ID Register (M_CASID) 


The MMU current address space ID register (M_CASID), shown in Figure 8-14, is used to 
compare the current EA with the ASID field in the TLB entry when searching for a match. 








Figure 8-14. MMU Current Address Space ID Register (M_CASID) 
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Table 8-14 describes M_CASID fields. 


Table 8-14. M_CASID Field Descriptions 
os 
o-27 f= Reserved. Ignored on write. Returns 0 on read 


28-31|CASID |Current address space ID. Compared with ASID field of a TLB entry to qualify a match 


8.8.10 MMU Access Protection Registers (MI_AP/MD_AP) 


The IMMU access protection register (MI_AP, SPR 786) contains the settings for the 
access protection groups for the IMMU. The DMMU access protection register (MD_AP, 
SPR 794) is identical. Both registers are shown in Figure 8-15. 



























GP10/GP11 |@P12|aP13|aP14] aP15 
786 (MI_AP); 794 (MD_AP) 


Figure 8-15. MMU Access Protection Registers (MI_AP/MD_AP) 


MI_AP/MD_AP fields are described in Table 8-15. 
Table 8-15. MI_AP/MD_AP Field Descriptions 


Name | Domain Manager Mode (Mx_ i ae = 1) PowerPC Mode (Mx_CTR[GPM] = 0) 


GP = Ks/Kp as defined by PowerPC architecture 
53 NG access 00 All accesses are treated as supervisor 
01 Client—access permission defined by page |01 Access permission defined by page protection 
protection bits bits 
10 Reserved 10 User and supervisor interpretation is swapped 
11 Manager-free access 11 All accesses are treated as user 





8.8.11 MMU Tablewalk Special Register (M_TW) 


The MMU tablewalk special register (M_TW), shown in Figure 8-16, is a scratch register 
used by tablewalk exception handlers. 





Figure 8-16. MMU Tablewalk Special Register (M_TW) 
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8.8.12 MMU Debug Registers 


The MMU CAM and RAM entries can be read through MX_CAM, MX_RAMO, and 
MX_RAM1. Attempting to write to MX_CAM using an mtspr instruction loads the CAM 
and RAM values of the entry indexed by DILB_INDX to MX_CAM, MX_RAM6O, and 
MX_RAM1. Any register can be the source for mtspr since its value is not used. The values 
of MX_CAM, MX_RAMO, and MX_RAMI can be read using mfspr; mtspr[MX_RAMO] 
and mtspr[MX_RAM1] are considered no-ops. 





8.8.12.1 IMMU CAM Entry Read Register (MI_CAM) 


Figure 8-17 shows the MMU instruction CAM entry read register (MI_CAM). When the 
content-addressable memory of the MI_CAM register is read, it contains the effective 
address and page sizes of an entry indexed by MI_CTR[ITLB_INDX]. MI_CAM is 
updated only by writing to it. 





Figure 8-17. IMMU CAM Entry Read Register (MI_CAM) 
Table 8-16 describes the MI_CAM fields. 
Table 8-16. Ml_CAM Field Descriptions 


Effective page number 


20-22 |PS Page size. (Values not shown are reserved) 
000 4 Kbyte 
001 16 Kbyte 
011 512 Kbyte 
111. 8 Mbyte 


23-26 | ASID | Address space ID of the DTLB entry to be compared with M_CASID[CASID] 


27 SH Shared page 
0 This entry matches only if the ASID field in the DTLB entry matches the value in M_CASID. 
1 ASID comparison is disabled for the entry 
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Table 8-16. MiI_CAM Field Descriptions (Continued) 











Subpage validity (subpage 0) 
0 Subpage 0 (Address[20—21] = 00) is not valid 
1 Subpage 0 (Address[20—21] = 00) is valid 





0 Subpage 1 Address[20—21] = = 01) is not valid 
1 Subpage 1 (Address[20-—21] = 01) is valid 


( 

( 
0 Subpage 2 (Address[20-—21] = 10) is not valid 
1 Subpage 2 (Address[20-—21] = 10) is valid 


0 Subpage 3 (Address[20—21] = 11) is not valid 
1 Subpage 3 (Address[20—21] = 11) is valid 







( 
( 





8.8.12.2 IMMU RAM Entry Read Register 0 (MI_RAMO) 


The IMMU RAM entry read register 0 (MI_RAMO), shown in Figure 8-18, contains the 
physical page number and page attributes of an entry indexed by MI_CTR[ITLB_INDX]. 
This register is updated only when MI_CAM is updated. 





Figure 8-18. IMMU RAM Entry Read Register 0 (MI_LRAMO) 


Table 8-17 describes MI_ RAMO fields. 
Table 8-17. MlI_RAMO Field Descriptions 


a 
Real (physical) page number | 


20-22 | PS_B | Page size. (Values not shown are reserved) 
000 4 Kbyte 
001 16 Kbyte 
011 512 Kbyte 
111 8 Mbyte 


Cache-inhibit attribute for the entry 
a Access protection group. Up to 16 protection groups supported (uses one’s complement format) 
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Table 8-17. Mil_RAMO Field Descriptions (Continued) 


a 


28 SFP {Supervisor (supervisor) fetch permission 
0 Subpage 0 (Address[20-—21] = 00) Supervisor fetch is not permitted 
1 Subpage 0 (Address[20—21] = 00) Supervisor fetch is permitted 


0 Subpage 1 (Address[20—21] = 01) Supervisor fetch is not permitted 


1 Subpage 1 (Address[20—21] = 01) Supervisor fetch is permitted 





30 |O0 Subpage 2 (Address[20-—21] = 10) Supervisor fetch is not permitted 
1 Subpage 2 (Address[20—21] = 10) Supervisor fetch is permitted 


1 Subpage 3 (Address[20-—21] = 11) Supervisor fetch is permitted 





0 Subpage 3 (Address[20—21] = 11) Supervisor fetch is not permitted 


8.8.12.3 IMMU RAM Entry Read Register 1 (MI_RAM1) 


The IMMU RAM entry read register 1 (MI_RAM1), shown in Figure 8-19, contains the 
protection mode information of the entry indexed by MI_CTR[ITLB_INDX]. This register 
is updated only when MI_CAM is written to. 





Figure 8-19. IMMU RAM Entry Read Register 1 (MI_RAM1) 
Table 8-18 describes MI_ RAM 1 fields. 
Table 8-18. MI_RAM1 Field Descriptions 


User fetch permission 
0 Subpage 0 (Address[20—21] = 00) User fetch is not permitted 
1 Subpage 0 (Address[20—21] = 00) User fetch is permitted 


0 Subpage 1 (Address[20—21] = 01) User fetch is not permitted 
1 Subpage 1 (Address[20—21] = 01) User fetch is permitted 


0 Subpage 2 (Address[20—21] = 10) User fetch is not permitted 
1 Subpage 2 (Address[20—21] = 10) User fetch is permitted 


0 Subpage 3 (Address[20—21] = 11) User fetch is not permitted 
1 Subpage 3 (Address[20-—21] = 11) User fetch is permitted 
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Table 8-18. Mi_RAM1 Field Descriptions (Continued) 


Page validity 
0 Page is not valid 


1 Page is valid 


Guarded memory attribute for entry 
0 Nonguarded memory 
1 Guarded memory 


8.8.12.4 DMMU CAM Entry Read Register (MD_CAM) 


When the DMMU CAM entry read register (MD_CAM), shown in Figure 8-20, is read, it 
contains the effective address and page sizes of an entry indexed by 
MD_CTR[DTLB_INDX]. This register is updated when a value is written to it. 








Figure 8-20. DMMU CAM Entry Read Register (MD_CAM) 
Table 8-19 describes MD_CAM fields. 

| Table 8-19. MD_CAM Field Descriptions | 
os 


SPVF | Subpage validity flags 
0 Subpage 0 (address[20-21] = 00) is not valid 
1 Subpage 0 (address[20—21] = 00) is valid 


20 
( 
21 0 Subpage 1 (address[20-—21] = 01) is not valid 
1 Subpage 1 (address[20—21] = 01) is valid 
22 0 Subpage 2 (address[20-—21] = 10) is not valid 
1 Subpage 2 (address[20—21] = 10) is valid 
3 


2 0 Subpage 3 (address[20-—21] = 11) is not valid 
1 Subpage 3 (address[20—21] = 11) is valid 
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Table 8-19. MD_CAM Field Descriptions (Continued) 


eel ee 


24-26 |PS Page size. (Values not shown are reserved) 
000 4 Kbyte 
001 16 Kbyte 
011 512 Kbyte 
111 8 Mbyte 





Shared page 


0 This entry matches only if the ASID field in the DTLB entry matches the value in M_CASID 
1 ASID comparison is disabled for the entry 


28-31 | ASID | Address space ID of the DTLB entry to be compared with M_CASID[CASID] 


8.8.12.5 DMMU RAM Entry Read Register 0 (MD_RAMO) 


The DMMU RAM entry read register 0 (MD_RAMO), shown in Figure 8-21, contains the 
physical page number and page attributes of an entry indexed by MD_CTR[DTLB_INDX]. 
This register is updated when any value is written to MD_CAM. 








Figure 8-21. DMMU RAM Entry Read Register 0 (MD_RAMO) 
Table 8-20 describes MD_RAMO fields. 
Table 8-20. MD_RAMO Field Descriptions 


Real (physical) page number 


Page size. (Values not shown are reserved) 
000 4 Kbyte 

001 16 Kbyte 

011 512 Kbyte 

111 8 Mbyte 


23-26 |APGI | Access protection group inverted. Access protection group number in one’s complement format 


27 G Guarded memory attribute for the entry 
0 Nonguarded memory 
1 Guarded memory 
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Table 8-20. MD_RAMO Field Descriptions (Continued) 


a 


Writethrough attribute for the entry 
0 Copyback data cache policy page entry 


1 Writethrough data cache policy page entry 


20 fc Cache-inhibit attribute for the entry 
oai[= [wee SSCS 


8.8.13 DMMU RAM Entry Read Register 1 (MD_RAM1) 


The DMMU RAM entry read register 1 (MD_RAM1), shown in Figure 8-22, contains the 
protection mode information of the entry indexed by MD_CTR{[DTLB_INDX]. This 
register is updated only when a value is written to MD_CAM. 








Figure 8-22. DMMU RAM Entry Read Register 1 (MD_RAM1) 
Table 8-21 describes MD RAM 1 fields. 
Table 8-21. MD_RAM1 Field Descriptions 


Change bit for DTLB entry 

0 Unchanged region. Write access to this page results in the implementation-specific IMMU 
exception invocation. Software should take an appropriate action before setting this bit to 1. 

1 Changed region. Write access is allowed to this page. 


Entry valid flag 
0 Entry is invalid 
1 Entry is valid 
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Table 8-21. MD_RAM1 Field Descriptions (Continued) 


CC 


Supervisor access 
0 Subpage 0 (address[20~—21] = 00) Supervisor access is not permitted 
1 Subpage 0 (address[20—21] = 00) Supervisor access is permitted 


0 Subpage 1 (address[20—21] = 01) Supervisor access is not permitted 
1 Subpage 1 (address[20—21] = 01) Supervisor access is permitted 





0 Subpage 2 (address[20—21] = 10) Supervisor access is not permitted 
1 Subpage 2 (address[20~—21] = 10) Supervisor access is permitted 


0 Subpage 3 (address[20~—21] = 11) Supervisor access is not permitted 
1 Subpage 3 (address[20—21] = 11) Supervisor access is permitted 


23 SAT Supervisor access type 
O Supervisor access type is read only 
1 Supervisor access type is read/write 


24 URPO | User read permission page zero 
0 Subpage 0 (address[20—21] = 00) User read access is not permitted 
1 Subpage 0 (address[20—21] = 00) User read access is permitted 


25 UWPO | User write permission page zero 
0 Subpage 0 (address[20—21] = 00) User write access is not permitted 
1 Subpage 0 (address[20—21] = 00) User write access is permitted 
URP1 |0 Subpage 1 (address[20—21] = 01) User read access is not permitted 
1 Subpage 1 (address[20—21] = 01) User read access is permitted 
UWP1 |0 Subpage 1 (address[20—21] = 01) User write access is not permitted 


1 Subpage 1 (address[20—21] = 01) User write access is permitted 


URP2 |0 Subpage 2 (address[20-21] = 10) User read access is not permitted 
1 Subpage 2 (address[20—21] = 10) User read access is permitted 


1 Subpage 2 (address[20~—21] = 10) User write access is permitted 


RP3 {0 Subpage 3 (address{20—21] = 11) User read access is not permitted 
1 Subpage 3 (address[20—21] = 11) User read access is permitted 


WPS |0 Subpage 3 (address[20—21] = 11) User write access is not permitted 
1 Subpage 3 (address[20—21] = 11) User write access is permitted 





Z UWP2 |0 Subpage 2 (address[20—21] = 10) User write access is not permitted 
( 
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8.9 Memory Management Unit Exceptions 
Table 8-22 describes MPC850-specific MMU exceptions. 


Table 8-22. MPC850-Specific MMU Exceptions 


ITLB miss | MSR[IR] = 1 and an attempt is made to fetch an instruction from a page whose EPN cannot be translated 


by the ITLB. Tablewalk software is responsible for loading information for the missed page from the 
translation table. See Section 8.10.1.1, “Translation Reload Examples,” and Section 6.1.3.2, “Instruction 
DTLB 
miss 
{TLB error 


TLB Miss Exception (0x01100).” 
DTLB 
error 


8.10 TLB Manipulation 


The TLBs can be updated in several ways. The TLB reloading process is primarily 
performed in software with some hardware assistance. The TLB replacement counter can 
be configured to select only from the first 6 entries in each TLB. TLBs can be invalidated 
by using the tlbie and tibia instructions. 
















MSR[DR] = 1 and an attempt is made to access a page whose EPN cannot be translated by the DTLB. 
Tablewalk software is responsible for loading translation information for the missed page from the 

translation table. See Section 8.10.1.1, “Translation Reload Examples,” and Section 6.1.3.3, “Data TLB 
Miss Exception (0x01200).” 













The EA cannot be translated and the level-one segment or page valid bit is zero in the translation table, 
the fetch access violates memory protection, or the fetch access is to guarded memory and MSR{IR] = 1. 
The exact exception cause is found in SRR1. Table 6-15 describes bit assignments. If needed, it is 
software’s responsibility to invoke the IS] exception handler. 










MSR[DR] = 1 and the EA of a load, store, icbi, dcbz, dcbst, dcbf, or debi cannot be translated and 
either the level-one segment or page valid bit are zero in the translation table, the access violates 
memory protection, or an attempt is made to write to a page with a negated change bit. 

The DSISR explains invocation of the DTLB error exception handler. Table 6-16 describes bit 
assignments. If needed, it is software’s responsibility to invoke the DSI exception handler. 







8.10.1 TLB Reload 


The TLB reload (tablewalk) function is performed in the software with some hardware 
assistance. It consists of the following actions: 


e Automatic storage of the missed data or instruction EA and default attributes in 
MI_EPN or MD_EPN. This value is loaded into the selected entry on a write to 
MI_RPN or MD_RPN. 


e Automatic updating of the replacement location counter to point to the entry to be 
replaced. This value is placed in the index field in MI_CTR and MD_CTR. 


e As Figure 8-4 and Figure 8-5 show, the level-one pointer is generated when an 
mfspr[M_TWB] is performed by concatenating the level-one table base with the 
level-one index. 


e The level-two pointer is generated when an mfspr[MD_TWC] is performed by 
concatenating the level-two table base (extracted from the level-one table) with the 
level-two index. 
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e The TLB entry is written by loading the tablewalk level-two entry value to Mx_RPN. 


e A scratch register, M_TW, is provided in addition to the architecture-defined 
SPRGO-SPRG3, so miss code need not corrupt existing GPRs. 


8.10.1.1 Translation Reload Examples 


The following examples reload a TLB entry using a two-level tree page table structure. In 
both examples, M_TWB holds the base pointer to the first-level table and data and 
instruction address translation are turned off. Figure 8-23 performs a DTLB reload. 





Save Rl 
Load Rl with level-1 pointer 


dtlb swtw mtspr M TW, Rl 
mfspr Rl, M_TWB 
lwz R1, (R1) 
mtspr MD TWC,R1 
mfspr R1, MD _TWC 


Load level-1 page entry 

Save level-2 base pointer and level-1 attributes 
Load R1 with level-2 pointer while taking page 
size into account 

lwz Rl, (Rl) 
mtspr MD _RPN, Rl 
mfspr Rl, M_TW 
rfi 


Load level-2 page entry 
Write TLB entry 
Restore Rl 


SR AR SE Se Sa AR 


Figure 8-23. DTLB Reload Code Example 


Figure 8-24 performs an ITLB reload 


itlb swtw mtspr M_TW, Rl Save Rl 


mfspr R1, SRRO Load R1 with instruction miss EA (the same data 
may be taken from MI_EPN) 

mtspr MD EPN, Rl 
mfspr Rl, M_TWB 
lwz Rl, (R1) 


# 

# 

# 

# Save instruction miss EA in MD _EPN 

# 

# 
mtspr MI_TWC,R1l # Save level-1 attributes 

# 

# 

# 

# 

# 

# 


Load R1 with level-1 pointer 
Load level-1 page entry 


mtspr MD TWC,R1 
mfspr Rl, MD TWC 


Save level-2 base pointer 

Load R1 with level-2 pointer while taking page 
size into account 

lwz R1, (R1) 
mtspr MI _RPN, Rl 
mfspr Rl, M_TW 


rfi 


Load level-2 page entry 
Write TLB entry 
Restore Rl 


Figure 8-24. ITLB Reload Code Example 


8.10.2 Locking TLB Entries 


Two entries in each TLB can be made unavailable to the replacement algorithm, thus 
enabling the user to lock translation entries into them by specially configuring the TLB 
replacement counters. 
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As shown in Figure 8-25, setting MI_CTR[RSV2I] or MD_CTR[RSV2D], configures the 
TLB replacement counter to select only from the first 6 entries in each TLB. Those fields 
also affect the tibia instruction as described later. Replacement counters are cleared after a 
tibia instruction executes. ITLB_INDX decrements after an ITLB reload; DILB_INDX 
decrements after a DTLB reload. 


ITLB | DTLB 























0 ; > aoa : F } aa : 0 j > a ‘ ae N : 
{ , : : | : : i" 
2 | | 
3 \ | 3 \ | 
4 \ | |] a , | | 
5 : oa 5 \ / \ 
a \ / rane ; 
6 RSV2l = 1 \ / 6 RSV2D = 1 \ / 
7 : \ ; ri \ / 
Nhe Sh 
RSV2I = 0 RSV2D = 0 


Figure 8-25. Configuring the TLB Replacement Counter 


8.10.3 Loading Locked TLB Entries 


The process of loading a single reserved entry in the TLB is as follows: 


. Disable the TLB by clearing MSR[IR] or MSR[DR] as needed. 


1 
2. Clear MI_CTR[RSV2I] (MD_CTR[RSV2D)]). 

3. Invalidate the EA of the reserved page by using tlbia or tibie. 
4 


. Set MI_CTR[ITLB_INDX] (MD_CTR[DTLB_INDX]) to the appropriate value (6 
or 7). 


5. Load Mx_EPN with the effective page number, the ASID of the reserved page, and 
set EV. 


6. Run software tablewalk code to load the appropriate entry into the translation 
lookaside buffer. See Section 8.10.1.1, “Translation Reload Examples.” 


7. Repeat steps 4—6 to load the other TLB entry. 
8. Set MI_CTR[RSV2I] (MD_CTR[RSV2D)]). 


8.10.4 TLB Invalidation 


Executing tlbie invalidates TLB entries that hit, including reserved entries. Note that 
EA[O—21] is used in the comparison because segment registers as defined by the PowerPC 
architecture are not implemented. Although for entries with pages larger than 4 Kbytes, 
some lower bits of the effective page number are ignored. The ASID value in the entry is 
ignored for the purpose of matching an invalidate address, thus multiple entries can be 
invalidated if they have the same effective address and different ASID values. 


Executing tlbia invalidates all entries in both TLBs, however if MI_CTR[RSV2I] or 
MD_CTR[RSV2D] is set, the two reserved entries are not invalidated. Software can 
explicitly invalidate one or more of these entries by eine MD_CTR[DTLB pias or 
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MI_CTR[{ITLB_INDX], negating MD_EPN[EV] or MJ_EPN[EV], and writing to the 
appropriate MD_RPN or MI_RPN. The TLBs are not invalidated automatically on reset, 
but are disabled. However, they must be invalidated under program control during 
initialization. 
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Chapter 9 
Instruction Execution Timing 





This chapter describes the timing of PowerPC instructions that execute in the core. 
Examples show stalls and bubbles due to serialization, latency, and blockage. 


9.1 Instruction Execution Timing Examples 


The following sections provide timings for the following scenarios: 


e Data cache load 

e Writeback arbitration 

e Private writeback bus load 

e Fastest external load (data cache miss) 
¢ Full completion queue (CQ) 

e Branch instruction handling 


e Branch prediction 


All examples assume an instruction cache hit. 


9.1.1 Data Cache Load with a Data Dependency 


Figure 9-1 shows a data cache load with zero wait states. The sub instruction depends on 
the value loaded to r12,which causes a bubble in the instruction stream. The example in 
Section 9.1.3, “Private Writeback Bus Load,’ has no such dependency. 


lwz 112,64 (SP) 
sub r3,r12,3 
addic r4,r14,1 
mulli 15133 

addi r4,3(r0) 
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Figure 9-1. Data Cache Load Timing 


9.1.2 Writeback Arbitration 


In Figure 9-2, the addic instruction is dependent on the mulli result. Because the 
single-cycle instruction sub has priority on the writeback bus over the mulli, the mulli 
writeback is delayed one clock and causes a bubble in the execute stream. 


mulli r12,r4,3 
sub 137153 
addic 4,r12,1 
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Figure 9-2. Writeback Arbitration Timing— Example 1 


In this example, the addic instruction is dependent on sub rather than on mulli. Although 
the writeback of the mulli is delayed two clocks, there is no bubble in the execution stream. 


mulli r12,r4,3 
sub r3,r15,3 
addic r4,r3,1 
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Figure 9-3. Writeback Arbitration Timing—Example 2 
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9.1.3 Private Writeback Bus Load 


In Figure 9-4, lwz and xor write back in the same clock since they use the writeback bus in 
two different ticks (a tick = 1/4 of a processor clock). 


lwz 112,64 (SP) 
sub 15153 

cror 4,14,1 

and r3,r4.r5 

xor r4.r3,r5 

ori r6,r12.13 
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- Figure 9-4, Private Writeback B Bus Load Timing 


9.1.4 Fastest External Load (Data Cache Miss) 


Figure 9-5 shows a sub instruction dependent on the value read by the load. It causes three 
bubbles in the execution stream. Assuming SCCR[EBDF] = 00, the external clock 
(CLKOUT) is shifted 90° from the internal clock (GCLK1). 


lwz r12,64 (SP) 
sub r3,712;)3 
addic r4,r14,1 
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Fetch ( wz X__ sub X__addic_—?) 





Decode a = Gl cc) al 
Read + Execute : (wz) © Bubble» ¢ Bubble» ¢ Bubble» Bubble} 
Writeback . 


L Ad dress a im) ere Be ee ge pepe th eg ao, 


L De Data 
Cache Address 


Load Writeback | ( wz} 


E Address 1 (wz) 


saevocvsaeeabnoneconeanscoesanvesantosae Sena Gummanmnmineaammemmmenannnite sii achicha epee SACO Neem ren tae OE ail ii ecto eprrtoorn pene asi edd etal tsk bine akg ane nc 


‘Figure 9-5. External Load Timing 
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9.1.5 A Full Completion Queue 


Figure 9-6 shows stalls due to a full CQ. Here, the CQ is full from executing sub, addic, 
and and. It takes one more bubble from the load writeback to allow further issue while the 
CQ retires sub, addic, and and. 





lwz 112,64 (SP) 
sub r5,r5 3 
addic r4r14,1 
and r3 14.15 
xor 14.7315 
ori r7,r8,1 

GCLK1 

Fetch 
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Read + Execute 

Writeback 
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Figure 9-6. Full Completion Queue Timing 


9.1.6 Branch Instruction Handling 


In Figure 9-7 the lwz instruction accesses internal memory with one wait state. The IQ and 
parallel operation of the BPU allows the two bubbles caused by the bl issue and execution 
to overlap the two bubbles caused by the load. Issuing bl causes a bubble because it does 
no work. 7 


lwz r12,64 (SP) 
sub r3;,7r12;3 
addic r4,r14,1 

bl func 

func: 

mulli r5,r3,3° 
addi r4,3(r0) 
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Figure 9-7. Branch Folding Timing 


9.1.7 Branch Prediction 


In this example, the bit instruction is dependent on the cmpzi instruction. Nevertheless, the 
BPU predicts the correct path and allows an overlap of its bubbles with those of lwz. When 
cmpi writes back, the BPU reevaluates the decision. If the prediction is correct, no more 
action is taken and execution continues. Instructions on the predicted path cannot be 
dispatched before the condition is resolved. 


while: 

mulli r3 x12 74 
addi r4,3(10) 
lwz 112,64 (12) 


cmpi 0712,3 
addic r6,r5,1 


bit cr0,while 
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Figure 9-8. Branch Prediction Timing 
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9.2 Instruction Timing List 


Table 9-1 summarizes instruction execution timings in terms of latency and blockage of the 
appropriate execution unit. A serializing instruction blocks all execution units. 
: | Table 9-1. Instruction Execution Timing 


Branch: b, ba, bl, bla, be, bea, bel, bela, belr, belrl, BPU {No 
bectr, bcctl 


Serialize + 2 
" 
Move to: mtspr, mtcrf, mtmsr, merxr except mtspr to _| Serialize + 1 All 
LR and CTR and to SPRs external to the core 


Move to LR, CTR: mtspr { BPU 











oy 
tn 


System call: sc, rfi 


CR logical: crand, crxor, cror, crnand, crnor, crandc, | 1 


creqv, crorc, merf 
| Serialize + 3 
| serialize + 3 


Not taken 1 1 


i 7 
~ 
oO 
5 









Integer trap: twi, tw 





= 
Section 9.2.3, “Accessing Off-Core SPRs.” 


Integer arithmetic: addi, add, addis, subf, addic, subfic, | 1 IU 
addic., addc, adde, subfc, subfe, addme, addze, 


subfme, subfze, neg 
Max 11° 


Integer divide: divw, divwu 


Integer multiply: mul, mullw, mulhw, mulhwu 2 No 
i i No 















== 
x 2 
a ND 
— 
o 

— 

NO 

NS 


Integer compare: cmpi, cmp, cmpli, cmpl 1 


Integer logical: andi., andis., ori, oris, xori, xoris, and, 
or, xor, nand, nor, eqv, andc, orc, extsb, extsh, cntizw 











Integer rotate and shift: rlwinm, rlwnm, riwimi, slw,srw, 
srawi, sraw 


Integer load: Ibz, Ibzu, Ibzx, Ibzux, Ihz, Ihzu, Ihzx, 
Ihzux, tha, Ihau, |hax, Ihaux, lwz, lwzu, lwzx, lwzux, 
iIhbrx, lworx. 







lU 

U 

lU 

IU 

IU 

LSU 
. LSU 
LSU 





as 
—_ 


NO a = 
lo) 
a 


Integer store: stb, stbu, stbx, stbux, sth, sthu, sthx, 
sthux, stw, stwu, stwbrx, stwx, stwux, sthbrx 


Integer load/store multiple: Imw, smw Serialize + 1 + no. of registers | LSU 


Synchronize: syne Serialize + 1 
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Table 9-1. Instruction Execution Timing (Continued) 


ey | 
Move CR from XER: merxr L 
Move to/from SPR (Debug, DAR, DSISR): mtspr, mfspr L 


LSU 

SU 

SU 

String instructions: Iswi, Ilswx, stswi, stswx. See Serialize + 1 + no. of words SU 
PU 

SU 

SU, 





















Section 9.2.2, “String Instruction Latency.” accessed 


Memory control instructions: isync Serialize 


Order memory access: eieio { 
with ones before 


' Although a store (as well as mtspr for SPRs external to the core) issued to the LSU buffer frees the core 
pipeline, the next load or store is not performed on the bus until it is free. 

2 See Table 4-5. 

3 Refer to Chapter 4, “PowerPC Core Register Set.” 

: See Section 4.1.1.1.1, “Condition Register (CR),” and Section 4.1.2.3.1, “Machine State Register (MSR).” 


Where 


Yes 
Yes 
Yes 
Yes 
Yes 


B 


Next load/store 
is synchronized 






L 
L 
L 


|-cache 


34 — ares 


NoOverflow => 3+( ; 


DivisionLatency = 


X 


Overflow = (F)or(MexNesetvenumeer) 


—1 
Overflow => 2 


6 Division blockage = division latency 

7 Blockage of the multiply instruction is dependent on the next instruction.|f the next instruction a divide, the 
blockage is 2 clocks; otherwise the blockage is 1 clock. is a multiply, the blockage is 1 clock; if it is 

8 Assumes nonspeculative aligned access, on-chip memory, and available bus. See Section 3.5.3.4, 
“Nonspeculative Load Instructions,” Section 3.5.3.5, “Unaligned Accesses,” and Section 9.2.1, “Load/Store 
Instruction Timing.” 


9.2.1 Load/Store Instruction Timing 


Table 9-2 summarizes load/store instruction timings. This table assumes zero wait-state 
memory references on a parked bus and pipelined external memory accesses. 


Table 9-2. Load/Store Instructions Timing 


Data Cache | External Memory | Data Cache | External Memory 


Load/store multiple 1+N! 1+N 















Instruction Type 











1 N denotes the number of registers transferred. 
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9.2.2 String Instruction Latency 


String accesses require separate aligned bus accesses. Figure 9-9 shows the maximum 
number of bus cycles needed for string accesses where the beginning and end are unaligned. 


0x00 00 01 02 #03 







0x04 2 bus cycles 

oxos | 

7 ty 
0x10 

0x14 17 2 bus cycles 

0x18 18 19 1A 1B 


Figure 9-9. Bus Latency for String Instructions 


9.2.3 Accessing Off-Core SPRs 


The LSU handles mtspr and mfspr accesses to off-core SPRs by using a special cycle on 
the internal bus. See Section 4.1.3.1, “Accessing SPRs.” If the access ends in a bus error, a 
software emulation exception is taken. All write operations to off-core SPRs (mtspr) are 
previously synchronized. In other words, the instruction is not taken until all prior 
instructions terminate. 
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Audience 


Part III is intended for system designers and programmers who need to understand the 
operation of the MPC850 at start up. It assumes understanding of the PowerPC 
programming model described in the previous chapters and a high level understanding of 
the MPC850. 


Contents 
Part III describes start-up behavior of the MPC850. 
It contains the following chapters: 
e Chapter 10, “System Interface Unit,’ describes the SIU, which controls system start- 


up, initialization and operation, protection, as well as the external system bus. 
e Chapter 11, “Reset,” describes the behavior of the MPC850 at reset and start-up. 


Suggested Reading 


Supporting documentation for the MPC850 can be accessed through the world-wide web 
at http://www.motorola.com/SPS/RISC/netcomm and at http://www.mot.com/SPS/ 
PowerPC/. This documentation includes technical specifications, reference materials, and 
detailed applications notes. 


Conventions 

This chapter uses the following notational conventions: 

Bold entries in figures and tables showing registers and parameter 
| RAM should be initialized by the user. 


mnemonics Instruction mnemonics are shown in lowercase bold. 


SRRRRRERRRRRRRRRRRRISRRRRRE RIOR NASA READ ASAD AO AAAS Daa G ROA aB ORR SOG DS ReaD SALE DSB io AROSE O REISER REREAD ESSE SER DSSS SAAD RSS IGOD LD DEI EEDOOIORIaRRRRROR RRR OR ENON ALD SIDA AAAS OSE E ARR R EROS RR ORE Te RETR RISER EINE ERD MESS DAD DSS AEDES ODDO DAD DDD ODED DAD eet 
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italics Italics indicate variable command parameters, for example, bectrx. 
Book titles in text are set in italics. 

Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

rA,rB _ Instruction syntax used to identify a source GPR 

rD Instruction syntax used to identify a destination GPR 

REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
mode enable bit in the machine state register. 


X In certain contexts, such as in a signal encoding or a bit field, 
indicates a don’t care. ? 


n Indicates an undefined numerical value 


Acronyms and Abbreviations 


Table 1 contains acronyms and abbreviations that are used in this document. Note that the 
meanings for some acronyms (such as SDR1 and DSISR) are historical, and the words for 
which an acronym stands may not be intuitively obvious. 


Table viii. Acronyms and Abbreviated Terms 


eee 
a 
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Table vii. Acronyms and Abbreviated Terms (Continued) 


Oe 
msb 
PCI 






pmsb Most-significant bit 
Machine state register 
Meet Peripheral component interconnect 





Time base register 
Translation lookaside buffer 
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Chapter 10 
System Interface Unit 





The system interface unit (SIU) controls system startup, initialization and operation, 
protection, as well as the external system bus. The system configuration and protection 
function controls the overall system and provides various monitors and timers, including 
the bus monitor, software watchdog timer, periodic interrupt timer (PIT), PowerPC™ 
decrementer, timebase, and real-time clock. The clock synthesizer generates the clock 
signals for other modules and external devices that the SIU interfaces with. The SIU 
supports various low-power modes that supply different ranges of power consumption, 
functionality, and wake-up time. The clock scheme supports low-power modes for 
applications that use baud rate generators and/or serial ports in standby mode. The main 
system clock can be changed dynamically; the baud rate generators and serial ports work 
with a fixed frequency. For more information, see Chapter 14, “Clocks and Power Control.” 


The external bus interface handles the transfer of information between internal buses and 
the memory or peripherals in the external address space. The MPC850 1s designed to allow 
external bus devices to request and obtain system bus mastership. Chapter 12, “External 
Signals,’ describes bus operation. The memory controller module provides a glueless 
interface to many types of memory devices and peripherals; it supports a maximum of eight 
memory banks, each with its own device and timing attributes. Memory control services are 
provided to both internal and external masters. The MPC850 supports circuit board test 
Strategies through user-accessible test logic that is fully compliant with the IEEE 1149.1 
standard described in Chapter 37, “IEEE 1149.1 Test Access Port.” 


Note that the MPC850’s address bus is 26 bits wide, while the internal address bus is 32 bits 
wide. Therefore, external accesses are considered internally as 26-bit accesses (A[6—31]) 
with A[O—5] equal to 0, while internal accesses are full 32-bit accesses. 


The PCMCIA host adapter module provides all control logic for a PCMCIA interface. This 
interface complies fully with the PCMCIA standard, Release 2.1+ (PC Card -16). It can 
support one PCMCIA socket with a maximum of eight memory or I/O windows. 
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10.1 Features 
The following is a list of the SIU’s main features: 


e System configuration and protection 
e System interrupt configuration 
e System reset monitoring and generation 
e Clock synthesizer 
e Power management 
¢ Real-time clock 
e PowerPC decrementer 
e Time base 
¢ Periodic interrupt timer (PIT) 
e External bus interface control 
e Eight memory banks supported by the memory controller 
e Debug support | 
e PCMCIA host adapter module supports one slot with eight memory or I/O windows 
e JEEE 1149.1 test access port 


10.2 System Configuration and Protection 


The MPC850 incorporates many system functions that normally must be provided in 
external circuits. The following features provide maximum system safeguards against 
hardware and/or software faults: 7 


e System configuration— Allows control of parity checking, show cycle operation, 
and part and mask number constants. 


¢ Bus monitor—Monitors the TA response time for bus accesses initiated by internal 
masters. TEA is asserted if the TA response limit is exceeded. The bus monitor 
measures time between TS and any termination of the bus cycle, including TA, TEA, 
and RETRY. 3 


e Software watchdog timer (SWT)—Asserts a reset or nonmaskable interrupt (NMI) 
that is selected by the system protection control register (S YPCR) if software fails 
to service this timer after a certain period. After system reset, the timer, if enabled, 
selects a maximum time-out period and asserts SRESET or NMI (system reset 
interrupt) if the time-out is reached. This timer can be disabled or its time-out period 
can be changed in SYPCR. Once SYPCR is written, it cannot be written again until 
a system reset. 








e Periodic interrupt timer (PIT)— Generates periodic interrupts for use with a 
real-time operating system (RTOS) or the application software. The PIT is clocked 
by the PITRTCLK clock, thus providing a period from 122 us to 8 seconds assuming 
a 32.768-KHz crystal. The PIT can be disabled if it is not needed. 
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¢ PowerPC timebase counter— Provides a timebase reference for the operating system 
or application software. This 64-bit timebase counter is defined by the PowerPC 
architecture and has two independent reference registers that generate a maskable 
interrupt when the programmed value in one of the registers is reached. The 
associated bit in the timebase status and control register (TBSCR) 1s set for the 
reference register that generated the interrupt. The timebase is clocked by the 
TMBCLK clock. 


e PowerPC decrementer— Provides a decrementer register/interrupt clocked at the 
timebase frequency. This 32-bit decrementing counter is defined to be clocked by 
TMBCLK. When it is driven by a 4-MHz oscillator the period for the decrementer 
is 4,295 seconds (approximately 71.6 minutes). 


e Real-time clock (RTC)— Provides time-of-day information to the operating system 
or application software. It is composed of a 45-bit counter and an alarm register. A 
maskable interrupt is generated when the counter reaches the value programmed in 
the alarm register. The RTC is clocked by PITRTCLK. 


e Freeze support—The SIU determines whether the software watchdog timer, PIT, 
timebase, decrementer, and real-time clock should continue to run in freeze mode. 


Figure 10-1 is a block diagram of the system configuration and protection logic. 


Module 
Configuration 


Bus ase 
Monitor EA 


Periodic Interrupt 


Tier > Interrupt 
Software Interrupt or 
Watchdog Timer System Reset 


PowerPC 


Clock Decrementer 


———— Interrupt 


PowerPC 


Timebase Counter Interrupt 
Real-Time int 
Clock nterrup 


Figure 10-1. System Configuration and Protection Logic 
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10.3 Multiplexing SIU Pins 


Due to the limited number of pins available in the MPC850 package, some of the 
functionalities share pins. Table 10-1 shows how the functionality is controlled on each pin. 


Table 10-1. Multiplexing Control 


Name Pin Configuration Control 
TSIZO/REG Dynamically active if the transaction addresses a slave controlled by the PCMCIA 
interface. 


BDIP/GPL_B5 Programmed in SIUMCR. 
RSV/ARQ2 
KR/RETRY/IRQ4/SPKROUT 
DP[0-3)IRQ[3-6] 

FRZ/IRQ6 


CS6/CE1_B 
CS7/CE2_B 






























Address matching and bank valid bits. When a transfer matches either memory 
controller bank 6 or any PCMCIA bank mapped to slot B, CS6/CE1_B is asserted. 
When a transfer matches either memory controller bank 7 or any PCMCIA bank 

mapped to slot B, CS7/CE2_B is asserted. 












WE0/BS_ABO/IORD 
WE1/BS_AB1/IOWR 

WE2/BS_AB2/PCOE 
WE3/BS_AB3/PCWE 


Dynamically active depending on the machine (GPCM, UPMB, or PCMCIA 
interface) assigned to control the required slave. 


















GPL_A0/GPL_BO Dynamically active depending on the machine (UPMA or UPMB) assigned to 
control the required slave. 
















OE/GPL_A1/GPL_B1 Dynamically active depending on the machine (GPCM, UPMA, or UPMB) 
assigned to control the required slave. 











GPL_A[2-3/GPL_B[2-3/CS|2-3] 








GPL_A[2-3]/GPL_B[2-3]: Dynamically active depending on the machine (UPMA 
or UPMB) assigned to control the required slave. 
GPL_A[2~3]/CS[2-3]: Programmed in the SIUMCR. 






ALE_B/DSCK/AT1 
IP_B[O-1]/IWP[0-1)/VFLS[0-1] 
IP_B2/AOIS16_B/AT2 
IP_B3/IWP2/VF2 
IP_B4/LWPO/VFO 
IP_B5/LWP1/VF1 
IP_B6/DSDI/ATO 
IP_B7/PTR/AT3 

TDI/DSD! 

TCK/DSCK 

TDO/DSDO 


UPWAITA/GPL_A4/AS 
















Programmed in the SIUMCR and hard reset configuration. See Section 11.3.1.1, 
“Hard Reset Configuration Word.” 














Programmed in the SIUMCR and MAMR of the memory controller. 


OP2/MODCK1/STS At power-on reset, this functions as MODCK[1—2]. Otherwise, programmed in the 
OP3/MODCK2/DSDO SIUMCR and hard reset configuration. 
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10.4 Programming the SIU 


The following sections describe registers used for programming the SIU. 


10.4.1 Internal Memory Map Register (IMMR) 


The internal memory map register (IMMR) is an SPR that identifies specific devices and 
the internal memory map base address. Using mfspr, software can read IMMR to 
determine the location and availability of any on-chip system resource. ISB can be written 
by mtspr, but PARTNUM and MASKNUM are mask programmed and cannot be changed. 


ISB 


Set by reset configuration 


R/W 


PARTNUM MASKNUM 
0010_0000 Value depends on the mask revision 


38 
Figure 10-2. Internal Memory Map Register (IMMR) 





Table 10-2 describes IMMR fields. 
Table 10-2. IMMR Field Descriptions 


ISB Internal space base. Defines the base address of the internal memory space. At reset, ISB can 
be configured to one of four addresses and changed to any value by the software. The number 
of programmable ISB bits and the resolution of the location of internal space depends on the 


implementation’s internal memory space. In the MPC850, all 16 bits can be programmed. 
Chapter 2, “Memory Map,” describes the internal memory map. Section 11.3.1.1, “Hard Reset 
Configuration Word,” describes available and default initial values. 


16-23 | PARTNUM | Part number (read-only). Mask programmed with a code corresponding to the part number of 
the MPC850. Intended to help factory test and user code that is sensitive to part refinements. 
PARTNUM would change if a new module is added or if the size of the memory module is 


revised. However, it would not change if the part is revised to fix a bug in an existing module. 
The MPC850 part number is 0x20. 


the MPC850. Intended to help factory test and user code that is sensitive to part refinements. 





24-31 | MASKNUM | Mask number. (read-only) Mask programmed with a code corresponding to the mask number of 


For the latest documentation on part/revision numbers and microcode REV_NUMs, see the 
website at http://www.motorola.com/SPS/RISC/netcomm/. 
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10.4.2 SIU Module Configuration Register (SIUMCR) 


The SIU module configuration register (SI(UMCR) contains bits that configure the 
following features in the SIU: 


e External bus arbitration 


e External master support 


e Debug 


and test port configuration 


e System interface pin configuration 


e Parity support 


EARB EARP Nreppeieiet eri DsHw!  DBGC 


(IMMR & OxFFFFO000) + 0x000 


OPAR PNCS | DPC | MPRE MLRC | AEME SEME|— _| GBSE B2DD ppp; i 
| 0000_0000_0000_0000 | 


(IMMR & OxFFFFO000) + 0x002 
Figure 10-3. SIU Module Configuration Register (SIUMCR) 





Table 10-3 describes SIUMCR fields. 


DSHW 


10-6 


Table 10-3. SIUMCR Field Descriptions 


feel 


External arbitration. For more information, see Section 13.4.6, “Arbitration Phase.” The default value | 
depends on the reset configuration; see Section 11.3.1.1, “Hard Reset Configuration Word.” 

0 Internal arbitration is performed. 

1 External arbitration is assumed. 


External arbitration request priority. Defines the priority of the external master’s arbitration request 
relative to requests by internal modules. Valid when EARB is cleared. 000 = lowest priority and 111 


| = highest (however, the internal UPM-based refresh cycles always have a higher priority and will 


preempt any external master if the internal arbiter is used). See Figure 13-21 and Table 19-1. 


7 |= | Reserved, should be cleared. 


Data show cycles. Selects the show cycle mode to be applied to data cycles. Data show cycles do 
not include CPU interaction with the data cache; they only include CPU interactions with peripherals 
on the internal U-bus (that is, CPM and SIU). (Instruction show cycles are programmed in ICTRL 
see the Hardware Specifications for more information.) This bit is locked by the DLK bit. 

0 Disable show cycles for all internal data cycles. 

1 Show address and data of all internal data cycles. 


Debug pin configuration. The default is set by the hard reset configuration word. See 
Section 11.3.1.1, “Hard Reset Configuration Word” for the description of these bits. 
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Table 10-3. SIUMCR Field Descriptions (Continued) 


cee en 


11-12 |DBPC | Debug port pins configuration. Determines the active pins for the development port. The default is 
set by the hard reset configuration word. See Section 11.3.1.1, “Hard Reset Configuration Word” for 






the description of these bits. 


13 f= Reserved, should be cleared. 


14 FRC FRZ pin configuration. Configures the functionality of FRZ/IRQ6. 

0 FRZ/ARQ6 functions as FRZ. 
1 FRZ/RQ6 functions as IRQ6. 

15 DLK Debug register lock. If DLK is set, bits 8-15 are locked and writes to those bits are no longer 
performed. These bits can be written once the internal FRZ signal is asserted, regardless of the 
state of DLK. Cleared at reset. 

OPAR_ | Odd parity. Used to program odd or even parity. Also used to generate parity errors for testing 
purposes by writing the memory with OPAR = 1 and reading the memory with OPAR = 0. 
PNCS Parity enable for nonmemory controller regions. Enables parity generation/checking for memory 
regions not controlled by the memory controller. 


Data parity pins configuration. Configures the functionality of DP[0O—3]/IRQ[3-6]. 
| 0 DP[0-3]/IRQ[3-6] functions as IRQ[3—6]. 
1 DP[O—3]/IRQ[3-6] functions as DP[0-3]. 
19 Multiprocessors reservation enable. 
0 RSV/ARQ2 functions as IRQ2. 
1 RSV/RQ2 functions as RSV. The interprocessor reservation protocol is enabled. RSV functions 
as defined in Section 13.4.9, “Memory Reservation.” 


20-21 |MLRC | Multi-level reservation control. Configures the functionality of KR/RETRY/IRQ4/SPKROUT. 
00 KR/RETRY/IRQ4/SPKROUT functions as IRQ4. 
01 KR/RETRY/IRQ4/SPKROUT is three-stated. 
10 KR/RETRY/IRQ4/SPKROUT functions as KR/RETRY. 





11 KR/RETRY/IRQ4/SPKROUT functions as SPKROUT. 


AEME | Asynchronous external master enable. Configures how the memory controller refers to external 
asynchronous masters initiating a transaction. lf AEME = 1, the memory controller interprets any 
assertion of AS as an external asynchronous master initiating a transaction. If it is reset, the memory 
controller ignores the value of AS. This bit and the GPLA4DIS bit of the machine A mode register 
controls the direction and functionality of the UPWAITA/GPL_A4/AS pin. 





sat — [rake | Woo — 
a 


23 SEME | Synchronous external master enable. Configures how the memory controller refers to synchronous 
external masters initiating a transaction. If SEME = 1, the memory controller interprets any assertion 





of TS not driven by the MPC850 as a synchronous external master initiating a transaction. If SEME 
= 0, the memory controller ignores TS unless it is external bus master. 


ae ae Reserved, should be cleared. (Bit 24 is the BSC bit on the MPC860.) 
GB5E |GPL_B5 enable 
0 The BDIP functionality is active. 
1 The GPL_B5 of the memory controller functionality is active 


ae B2DD_ | Bank 2 double drive. If this bit is set, CS2 is reflected on GPL_x2. 
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Table 10-3. SIUMCR Field Descriptions (Continued) 


eel eee 
B3DD_ | Bank 3 double drive. If this bit is set, CS@ is reflected on GPL_x3. 
28-31 | Reserved, should be cleared. 


10.4.3 System Protection Control Register (SYPCR) 


The system protection control register (SYPCR) controls the system monitors and bus 
monitor timing. It can be read at any time, but can be written only once after system reset. 








| 4144.1441.1141.1111 
(IMMR & OxFFFF0000) + 0x004 


TET i 


(IMMR & OxFFFFOO00) + 0x006 
Figure 10-4. System Protection Control Register (SYPCR) 


Table 10-4 describes SYPCR fields. 
Table 10-4. SYPCR Field Descriptions 


1 ee —_— Seer 
SWTC | Software watchdog timer count. Count value for the software watchdog timer. 


16-23 Bus monitor timing. Defines the timeout period, in 8 system clock resolution, for the bus monitor. 










maximum timeout is 2,040 clocks. 


















Bus monitor enable. Controls bus monitor operation during internal-to-external bus cycles. 

0 Disable the bus monitor. 

1 Enable the bus monitor. 

Note: If the bus monitor is disabled, transfer error conditions do not cause TEA to be asserted. 


Software watchdog freeze 
0 The software watchdog timer continues counting even if FRZ is asserted. 
1 The software watchdog timer stops counting when FRZ is asserted. 


Software watchdog enable. 
To disable the software watchdog timer, it should be cleared by the software after a system reset. 
0 Software watchdog timer disabled. 
1 Software watchdog timer enabled. 








Software watchdog reset/interrupt select. 
0 The software watchdog timer causes an NMI (system reset interrupt) to the core. 
1 The software watchdog timer causes an HRESET (default). 
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Table 10-4. SYPCR Field Descriptions (Continued) 


oc = 





31 SWP Software watchdog prescale. 
0 The software watchdog timer is not prescaled. 
1 The software watchdog timer is prescaled by a factor of 2,048. 


10.4.4 Transfer Error Status Register (TESR) 


The transfer error status register (TESR) has a bit for each transfer error exception source. 

Set bits indicate what type of transfer error exception that occurred since bits were last 
cleared. Bits are cleared by reset or by writing ones to them. Canceled speculative accesses 

that do not cause an interrupt may set these bits. TESR has two identical sets of fields, one 

for instruction transfers and one for data transfers. 


0000_0000_0000_0000 


(IMMR & OxFFFFO000) + 0x020 


|= frext]immt] peo | ipet |ipe2|ipes| — | pext [pT | DPBo| pPB1 | DPB | DPBS | 


0000_0000_0000_0000 


(IMMR & OxFFFFO000) + 0x022 
Figure 10-5. Transfer Error Status Register (TESR) 


Table 10-5 describes TESR fields. 
Table 10-5. TESR Field Descriptions 


Reserved, should be cleared. 


Instruction external transfer error acknowledge. Set if the cycle is terminated by an externally 
generated TEA when an instruction fetch is initiated. 





Instruction transfer monitor timeout. Set if the cycle is terminated by a bus monitor timeout when 
an instruction fetch is initiated. 


20-23 | IPB[O-3] | Instruction parity error on bytes 0-3. Each byte lane has four parity error status bits; one is set for 


the byte that had a parity error when an instruction was fetched. Parity check for memory not 
controlled by the memory controller is enabled by SIUMCR[PNCS], see Table 10-3. 


24-25 | Reserved, should be cleared. . 


DEXT Data external transfer error acknowledge. Set if the cycle is terminated by an externally generated 
TEA signal when a data load or store is requested by an internal master. 
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Table 10-5. TESR Field Descriptions (Continued) 


ce 


27 DTMT Data transfer monitor timeout. Set if the cycle is terminated by a bus monitor timeout when a data 
load or store is requested by an internal master. | 


memory not controlled by the memory controller is enabled by SIUMCR[PNCS], see Table 10-3. 





28-31 | DPB[O-3] | Data parity error on bytes 0-3. Each byte lane has four parity error status bits; one is set for the 
byte that had a parity error when an internal master requested a data load. Parity checking for 


10.4.5 Register Lock Mechanism 


If the MPC850 sets PLPRCR[LPM] = 11 before entering power-down mode, then the 
registers of the SIU maintained by KAPWR are automatically protected. However, to 
provide protection of the SIU registers maintained by KAPWR against uncontrolled 
shutdown, a register locking mechanism is included. These registers can be write-protected 
in a set of associated key registers. The MPC850 key registers are shown in Table 10-6. 


Table 10-6. Key Registers 


TBSCRK—Timebase status and control register key 
TBREFAK — Timebase reference register A key 
TBREFBK—Timebase reference register B key 
TBK—Timebase/decrementer register key 
0x310-31F | Reserved | | 
RTCSCK—Real-time clock status and control register key 
RTCK— Real-time clock register key 
RTSECK—Real-time alarm seconds key = 
RTCALK—Real-time alarm register key 
PISCRK—Periodic interrupt status and control register key 
PITCK—Periodic interrupt count register key — 


SCCRK— System clock control key 
PLPRCRK—PLL, low power and reset control ean: key 
RSRK—Reset status register key 
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Each register in the keep-alive power region has a key register that can be in an open or 
locked state. At power-on reset, all key registers are open, except for the real-time clock key 
registers. Each key register has an associated address in the internal memory map, as shown 
in Table 10-6. A write of 0OxS55CC_AA33 to a key register unlocks its associated SIU 
register; any other access (including reads or writes of any other value) to a key register 
locks its associated SIU register. For example, writing a 0OxS5CC_AA33 to the RTCK key 
register allows the RTC register to be written. The key registers are write-only; a read of the 
key register does not return the last value written. 


When a register is locked, an attempt to write to it will result in a machine check exception, 
and will not change the value in the register. One exception to this is the timebase register 
(TBU and TBL), locked with TBK. A write to the timebase register when it is locked results 
in a software emulation exception. 


Reads are allowed at all times to any of the SIU registers, regardless of whether they are 
locked or unlocked. 


Write any other value to the key register 
Power-on reset 


\ 


Cm) 


—_— 


Write 0x55CC_AA33 to the key register 
Figure 10-6. Register Lock Mechanism 


For more information on key registers, see Section 14.5.7.3, “Register Lock Mechanism: 
Protecting SIU Registers in Power-Down Mode.” 


10.5 System Configuration 


The SIU module configuration register (SIUMCR) is used for configuring external bus 
arbitration logic, external master support, and pin multiplexing. See Section 10.4.2, “SIU 
Module Configuration Register (SIUMCR).” 


10.5.1 Interrupt Structure 


The SIU receives interrupts from internal sources, like the PIT, real-time clock, 
communications processor module (CPM), and the external IRQ pins. Figure 10-7 shows 
the MPC850 interrupt structure. 


REOERESESSISSSSSSESEESOORSESSESOEOOQO SERGE SRR R RRR EER SSE ERB SSR EB ESE REESE REESE ESS S ESO EER ROGGE RES ESE SSSR BOOR ORS ISOSESSISERSESSGG SOLO OO LOGOS ORNS LL ORGS 
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| 
Watchdog Time NMI 


Generator 


NMI 
Decrementer 


PowerPC 


Periodic CORE 
Interrupt Timer 


Real-Time 


ee Interrupt 
Controller External 


Interrupt 
PCMCIA 





Figure 10-7. MPC850 Interrupt Structure 


If programmed to generate interrupts, the software watchdog timer generates a 
nonmaskable system reset interrupt (NMI) to the core. Asserting the external IRQO pin 
generates an NMI as well. Note that the core takes the system reset interrupt vector when 
an NMI is asserted and jumps to the external interrupt vector when any other interrupt is 
asserted by the interrupt controller. Each external IRQ pin is assigned a priority level. Each 
SIU internal interrupt source, generated by the CPM’s interrupt controller (CPIC), can be 
assigned by the software to one of eight additional internal interrupt priority levels, 
described in Chapter 35, “CPM Interrupt Controller.” 


Section 10.5.3.1, “Nonmaskable Interrupts—IRQO and SWT,’ describes how IRQO 
operates differently from other IRQ signals, and how the operation is configurable through 
SIU registers. 
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10.5.2 Priority of Interrupt Sources 


There are eight external IRQ pins (IRQO is essentially nonmaskable, although in a limited 
sense it can be masked as shown in Table 10-8) and eight interrupt levels. Asserting IRQO 
causes an NMI. The other 15 interrupt sources assert a single interrupt request to the core 
(the external interrupt). Table 10-7 shows interrupt priorities. 





Table 10-7. Priority of SIU Interrupt Sources 


Priority Level 


Highest 





Interrupt pase 
(SIVEC[IN 


Interrupt Source 
SARS Ia 
see ee 
ee 



































Lowest 
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10.5.3 SIU Interrupt Processing 


Figure 10-8 shows the general flow of SIU interrupt processing. 


SIU interrupt occurs 







Set bit in SIPEND 


Bit set in SIMASK Bit not set in SIMASK 





Assert external interrupt 
to core 


Figure 10-8. SIU Interrupt Processing 


10.5.3.1 Nonmaskable Interrupts—IRQO and SWT 
Figure 10-9 is a logical representation of IRQO. 


End 





SIEL[EDO} SIEL[EDO] 





° 
NMI 

















| op SIPEND[IRQO 


Figure 10-9. IRQO Logical Representation 


SIPEND{IRQO] = 1 


Table 10-8 describes the differences between IRQO and other IRQ interrupts. 
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Table 10-8. IRQO Versus IRQx Operation 









Functionality 


Exception Vector | 0x100 0x500 









SIMASK Not used, except for enabling SIVEC Used for masking 


SIVEC Not normally used. If used, SIMASK[IRQO] must | Supplies the interrupt code so the core knows 
be set. the interrupt source. 


SWT (software watchdog timer) interrupts behave similarly in that they jump to the system 
reset vector (0x100). However, they are not affected by any interrupt controller registers. 


Although NMI causes a jump to the system reset vector, no other reset action is taken. For 
information on recoverability of NMI, see Section 6.1.5, “Recoverability after an 
Exception.” 


10.5.4 Programming the SIU Interrupt Controller 


The SIU’s interrupt controller includes the SIU interrupt pending register (SIPEND), SIU 
interrupt mask register (SIMASK), SIU interrupt edge/level register (SIEL), and SIU 
interrupt vector register (SIVEC) registers. These are described in the following sections. 


10.5.4.1 SIU Interrupt Pending Register (SIPEND) 


SIU interrupt pending register (SIPEND) bits, shown in Figure 10-10, correspond to 
interrupt requests. 









eX 


SHE) PM UAR cas Seema Pate 0. tha, Lear Bieh gih ce ENEG SP 26 fA oe Paes 
0000_0000_0000_0000 
= (IMMR & OxFFFFOOOO) + 0x012 


Figure 10-10. SIU Interrupt Pending Register (SIPEND) 
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Table 10-9 describes SIPEND fields. 
Table 10-9. SIPEND Field Descriptions 


a 


0, 2, 4, Interrupt request 0-7. Indicate whether an edge-triggered interrupt is pending. 
6, 8, 10, 0 The appropriate interrupt is not pending. 
12, 14 1 The appropriate interrupt is pending. 


0 The appropriate interrupt is not pending. 
1 The appropriate interrupt is pending. 


16-31 = | Reserved, should be cleared. 


1, 3, 5, Level O—7. When set, these bits indicate a pending level interrupt of corresponding value. 





The LVL[0—7] bits are associated with internal exceptions, and when set indicate that an 
interrupt service is requested if they are not masked by the corresponding SIMASK bit. 
These bits reflect the status of the internal requesting device and are cleared when the 
appropriate actions are software-initiated in the device. Writing to LVLn bits has no effect. 


The IRQ(0—7] bits are associated with the IRQ[0—7] signals, and their function depends on 
the sensitivity defined for them in SIEL; see Section 10.5.4.3, “SIU Interrupt Edge/Level 
Register (SIEL).” 


¢ When an IRQ pin is defined as a level interrupt (SIEL[EDn] = 0), the corresponding 
IRQ bit behaves like an LVL bit. 


¢ If an IRQ pin is defined as an edge interrupt (SIEL[EDn] = 1), the corresponding bit 
being set indicates that a falling edge was detected on the line and are reset by 
writing ones to them. , 


Note that IRQO can be masked in only a very limited sense. If SIEL[EDO] = 
edge-sensitive, and SIPEND[IRQO] is not cleared in the interrupt service routine, further 
assertions of IRQO are masked. 





10.5.4.2 SIU Interrupt Mask Register (SIMASK) 


Bits in SIMASK correspond to the interrupt request bits in SIPEND. Setting SIMASK bits 
enable the generation of interrupt requests to the core. SIMASK is updated by the software, 
which must determine which interrupt sources are enabled at a given time. 
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| RMO | LVMo IRM Lv | IRM2 | LVM2 IRM3 IRMe | LVM6 IRM7 |LVM7 
0000_0000_0000_0000 


0000_0000_0000_0000 
R/W 


(IMMR & OxFFFFOOOO) + 0x016_ 


Figure 10-11. SIU Interrupt Mask Register (SIMASK) 
Table 10-10 describes SIMASK fields. 
Table 10-10. SIMASK Field Descriptions 


SS 
Interrupt request mask 0. Enables/disables updating SIVEC[INTC]. |RQO generates an NMI 
regardless of this bit. 


1,3, 5, |LVMn | Level mask 0-7. When set, these bits enable an internal interrupt request to be generated. 
7,9, 11, 0 Disable generation of an interrupt request bit in SIPEND. 
13, 15 1 Enable generation of an interrupt request bit in SIPEND. 

























Interrupt request mask 1-7. When set, these bits enable an IRQ interrupt request to be generated. 
0 Disable generation of an interrupt request bit in SIPEND. 
1 Enable generation of an interrupt request bit in SIPEND. 


16-31 | Reserved, should be cleared. 


The following procedure prevents possible interrupt errors when modifying mask registers, 
such as SIMASK: 





1. Clear MSR[EE]. (Disable external interrupts to the core.) 
2. Modify the mask register. 
3. Set MSR[EE]. (Enable external interrupts to the core.) 


This mask modification procedure ensures that an already pending interrupt is not masked 
before being serviced. 


10.5.4.3 SIU Interrupt Edge/Level Register (SIEL) 


Bits in SIEL, shown in Figure 10-12, define interrupts as edge- or level-triggered and 
enable/disable their use as wake-up signals in low-power mode. 
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£00 mo] EDs [wr | E02 | wz eos [wna « ws] eos [wns] Do ws] E07 [wm 
0000_0000_0000_0000 


R/W 
(IMMR & OxFFFFOOOO) + 0x018 = 


0000_0000_0000_0000 
ee 
(IMMR & OxFFFFOOOO) + 0x01A 


Figure 10-12. SIU Interrupt Edge/Level Register (SIEL) 







Table 10-11 describes SIEL fields. 
Table 10-11. SIEL Field Descriptions 


Ss 


Edge detect 0-7. 3 
0 A low logical level in the IRQ signal indicates an interrupt request. 
1 A falling edge in the corresponding IRQ signal indicates interrupt request. 










| Wake-up mask 0-7 
0 Not allowed to exit from low-power mode. 
1 Low-level detection in IRQn allows the MPC850 to exit or wake up from low-power mode. 


16-31 so Reserved, should be cleared. 


10.5.4.4 SIU Interrupt Vector Register (SIVEC) 
The SIU interrupt vector register (SIVEC) is shown in Figure 10-13. 















ic renateud eased 
0011_1100_0000_0000 
(IMMR & OxFFFFOOOO) + 0x01C 


0000_0000_0000_0000 | 
(IMMR & OxFFFFO000) + 0x01E 


Figure 10-13. SIU Interrupt Vector Register (SIVEC) 
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Table 10-12 describes SIVEC fields. 
Table 10-12. SIVEC Field Descriptions 


Ea 


INTC | Interrupt code. Indicates the highest priority pending interrupt; equals the interrupt number times 4, as 









shown in Table 10-7. 


e-31]— | Reserved, should be cleared. 


SIVEC[INTC] represents the unmasked interrupt source of the highest priority level. When 
SIVEC is read as a byte, a branch table can be used in which each entry contains one 
instruction (branch). The interrupt code is the interrupt number times 4, which allows 
indexing into the table. When read as a half word, each entry can contain a full routine of 
up to 256 instructions; see Figure 10-14 and Table 10-7. 





intr: eee Intr: eee 
Save State Save State 
R3 <— @ SIVEC R3 <- @ SIVEC 
R4 <- Base of Branch Table R4 <— Base of Branch Table 


lbz Rx, R3 (0) # Load as Byte Ihz Rx, R3 (0) # Load as half word 
add Rx, Rx, R4 add Rx, Rx, R4 
CTR, Rx mtspr § CTR, Rx 


betr 


Base b Routine Base 1st Instruction of Routine 


Base + 4 b Routine? Base + 400 1st Instruction of Routine2 
Base +8 b Routine Base + 800 1st Instruction of Routine 


Base + C b —Routine4 Base + C00 1st Instruction of Routine4 





Base + 10 . Base + 1000 





Base + n : Base +n 





Figure 10-14. Interrupt Table Handling Example 


The interrupt to be serviced can be determined by reading SIVEC[INTC]. For example, if 
IRQ3, level 3, and IRQ6 interrupts occur simultaneously and IRQ3 is masked, INTC = 
0b0001_1100 (Ox1C), indicating that the level 3 interrupt should be handled. 
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Note that SIVEC[INTC] contains the encoding for a level-7 interrupt (see Table 10-7) by 
default, even when no interrupts are pending. Thus, polling SI[VEC when all interrupts are 
masked returns the level-7 vector. Therefore, the level-7 interrupt vector may indicate a 


‘spurious interrupt in the following cases: 


¢ Polling SIVEC returns a level 7 interrupt, but nothing is programmed to interrupt at 
level 7. 7 

e Polling SIVEC returns a level 7 interrupt, but SIPEND[LV7] is not set (assuming 
something is programmed to interrupt at level 7). 


10.6 The Bus Monitor 


Control of the bus monitor is provided in the SYPCR. The bus monitor ensures that each 
bus cycle initiated by the MPC850 terminates within a reasonable time. The MPC850’s bus 
monitor does not monitor accesses initiated by external masters. At the start of the transfer 
start signal (TS), the monitor begins counting and stops when transfer acknowledge (TA), 
retry (RETRY) or transfer error (TEA) is asserted. For burst cycles, this action is also 
performed between subsequent TA assertions for each data beat. If the monitor times out, 
the bus monitor terminates the cycle by internally asserting TEA. The programmability of 
the timeout allows for a variation in system peripheral response time. The timing 
mechanism is clocked by the system clock divided by eight. The maximum value is 2,040 
system clocks. The bus monitor is always active when FRZ is asserted or when a debug 
mode request is pending, regardless of the state of the SYPCR[BME] bit. 











Note that if the bus monitor is disabled, transfer errors do not cause TEA to be asserted. 


10.7 The Software Watchdog Timer 


The SIU provides the software watchdog timer (SWT) option that prevents system lockup 
when software gets trapped in loops without a controlled exit. The software watchdog timer 
is enabled after HRESET to automatically generate a HRESET if it times out. If the 
software watchdog timer is unneeded, clear SYPCR[SWE] to disable it. If it is used, the 
software watchdog timer requires a special service sequence to be executed periodically; 
otherwise, the watchdog timer times out and issues a reset or an NMI, which is programmed 
by SYPCR[SWRI]. Once SYPCR is written by the software, SYPCR[SWE] cannot be 
changed. See Section 10.4.3, “System Protection Control Register (SYPCR).” To service 
the software watchdog timer, follow these steps: 


1. Write 0x556C to the software service register. (SWSR) 
2. Write OxAA39 to the SWSR. 


This sequence clears the watchdog timer and the timing process repeats. If a value other 
than 0x556C or 0xAA39 is used, the entire sequence must start over. Although the writes 
must occur in the correct order before a timeout occurs, any number of instructions may be 
executed between the writes. This allows interrupts and exceptions to occur between the 
two writes when necessary. See Figure 10-15. 
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0x556C/Don't reload 







Reset 


\ 


State 0 State 1 
& Waiting for 0x556C Waiting for OxAA39 


0xAA39/Reload 








Not 0x556C/Don't reload 


Not 0xAA39/Don't reload 


Figure 10-15. Software Watchdog Timer Service State Diagram 


The decrementer begins counting when it is loaded with a value from the SWTC field. This 
value is then loaded into a 16-bit down-counter clocked by the system clock. When 
necessary, an additional divide by 2,048 prescaler is used. After the timer reaches 0x0, a 
software watchdog expiration request is issued to the reset or NMI control logic. At reset, 
the value in SWTC is set to the maximum value and is loaded into the software watchdog 
down-counter, starting the process. 


Although most software disciplines permit or encourage the watchdog concept, some 
systems require a selection of timeout periods. For this reason, the software watchdog timer 
provides a selectable range for the timeout period. Figure 10-16 shows the method for 
handling this need. When a new value is loaded into SWTC, the software watchdog timer 
is not updated until the servicing sequence is written to SWSR. If the SWE bit is loaded 
with a zero, the modulus counter will not count. 


SWSR 
SWTC 


Service 
16-Bit 
Down-counter HRESET 
Core Clock Divide Rollover = 0 or NMI 
Clock Disable by 2,048 ; 
MUX | 


Timeout 





FRZ 


SWP 
Figure 10-16. Software Watchdog Timer Block Diagram 
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10.7.1 Software Service Register (SWSR) 


The software service register (SWSR) is the location that the software watchdog timer 
servicing sequence writes to. To prevent a SWT timeout, a write of 0x556C followed by 
OxAA39 should be written to this register. The SWSR can be written at any time, but returns 
all zeros when read. 








0000_0000_0000_0000 
Z (IMMR & OxFFFF0000) + 0x00E 


Figure 10-17. Software Service Register (SWSR) 










Table 10-13 describes SWSR fields. 
Table 10-13. SWSR Field Descriptions 


feel 
Sequence. This field is the pattern that is used to control the state of the software watchdog timer. 


10.8 The PowerPC Decrementer 


A PowerPC-defined 32-bit decrementing counter supports the decrementer interrupt. In the 
MPC850, the decrementer is clocked by TMBCLK, so TBSCR[TBE] must be set for the 
decrementer to start. The timebase and decrementer counters are driven by TMBCLK: 





932 


Ping teres aes 
dec" (Fimbelk) 


The state of the decrementer is not affected by HRESET and SRESET, so it should be 
initialized by software. Note, however, that it is disabled and reset by PORESET. It 
continues counting while HRESET and SRESET are asserted and it is implemented with 
the following requirements in mind. , 


e The decrementer is unaffected when read. 


° When DEC [0] changes from 0 to 1, an interrupt request is signaled. If a previous 
decrementer interrupt request was made, only one interrupt is reported. 


e Explicitly changing DEC[O] from 0 to 1 in software signals an interrupt request. 


A decrementer interrupt is also sent to the power-down wake-up logic, so the core can 
waken from power-down mode. A decrementer exception causes a pending interrupt 
request in the core, which is cleared automatically when the decrementer interrupt is taken, 
Table 10-14 shows some decrementer periods available, assuming a 4-MHz oscillator. 
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Table 10-14. Decrementer Timeout Values 


Count Value Timeout 


1.0s 
10.0s 
100.0 s 
1,000 s 
FFFFFFFF (hex) 4,295 s 





10.8.1 Decrementer Register (DEC) 


The decrementer register (DEC) is a PowerPC SPR. It can be read or written to by mfspr 
or mtspr. DEC is powered by KAPWR and continues counting when KAPWR is applied. 
Control of the decrementer is provided in the TBSCR. The decrementer and timebase use 
TMBCLK. Note that DEC is a keyed register. It must be unlocked in TBK before it can be 
written. 





Figure 10-18. Decrementer Register (DEC) 


Table 10-15 describes the DEC register. 
Table 10-15. DEC Field Descriptions 


CS 
0-31 |DEC | Decrementer. These bits are used by a down counter to cause decrementer interrupts. Reading DEC 
always returns the current count value from the down counter. 


10.9 The PowerPC Timebase 


The PowerPC timebase is a 64-bit free-running binary counter. For the MPC850, the 
timebase is clocked by TMBCLK. The timebase period is as follows: 





; 64 
18 Fimbelk 

The timebase is unaffected by RESETH and RESETS and should be initialized by software. 
Note, however, that it is disabled and reset by PORESET. The entire timebase cannot be 
accessed with a single instruction; mttb and mftb access the lower half of the timebase and 
mttbu and mftbu access the upper half. A maskable interrupt is generated when the 
timebase count reaches a value programmed in one of the reference registers, TBREFA and 
TBREFB; two status bits indicate which one caused the interrupt. 
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10.9.1 Timebase Register (TBU and TBL) 


The timebase register (TB) holds a 64-bit integer that 1s incremented periodically. It is 
implemented in two parts, time base upper and time base lower (TBU and TBL). There is 
no automatic initialization of TB, therefore, system software must perform this 
initialization. The contents of TB can be written by mtspr and read by mftb or mftbu 
instruction. Figure 10-19 shows TBU. Note that the TBU and TBL are keyed registers. 
They must be unlocked in TBK before they can be written. 






269 (Read)/285 (Write) 


Figure 10-19. Timebase Upper Register (TBU) 
Table 10-16 describes TBU fields. | 
Table 10-16. TBU Field Descriptions 


[aie [meme [eon 
Timebase upper. The value in this field is used as an upper part of the timebase counter. 


Figure 10-20 shows TBL. 
















268 (Read)/284 (Write) 


Figure 10-20. Timebase Lower Register (TBL) 





Table 10-17 describes TBL fields. 


Table 10-17. TBL Field Descriptions 
[ore [ome [oreo 


Timebase lower. The value in this field is used as the lower part of the timebase register. 


10.9.2 Timebase Reference Registers (TBREFA and TBREFB) 


TBREFA and TBREFB are associated with TBU and TBL. When the contents of TBL 
matches a reference register, a reference event is signaled in TBSCR[REFA] or 
TBSCR[REFB]. These events can generate interrupts, if enabled. Note that TBREFA and 
TBREFB are keyed registers. They must be unlocked in TBREFAK and TBREFBK before 
they can be written. | 
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TBREFA/TBREFB 


TBREFA (IMMR & OxFFFFO000) + 0x206/TBREFB (IMMR & OxFFFFO000) + 0x20A 
Figure 10-21. Timebase Reference Registers (TBREFA and TBREFB) 


Table 10-18 describes TBREFA/TBREFRB fields. 
Table 10-18. TBREFA/TBREFEB Field Descriptions 


ee 
TBREFA Timebase reference upper. Represents the 32-bit reference value for TBU. 
TBREFB Timebase reference lower. Represents the 32-bit reference value for TBL 


10.9.3 Timebase Status and Control Register (TBSCR) 










The timebase status and control register (TBSCR) controls the timebase count enable and 
interrupt generation. It is also is used for reporting the interrupt sources, and it can be read 
at any time. Status bits are cleared by writing ones; writing zeros has no effect. Note that 
TBSCR 1s a keyed register. It must be unlocked in TBSCRK before it can be written. 












Pero Rafa nero] — [rere [neroe| Tor [Toe 


Figure 10-22. Timebase Status and Control Register (TBSCR) 
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Table 10-19 describes TBSCR fields. | 
- Table 10-19. TBSCR Field Descriptions 


TB aa Timebase interrupt request. Determines interrupt priority level of the timebase. To specify a certain 
iui (9 the appropriate bit should be set. 


REFA Reference interrupt status. If set, REFA indicates that a match was detected between the 
corresponding reference register (TBREFA for REFA and TBREFB for REFB) and the TBL. REFA is 
cleared by writing a 1. 


ane FB | Reference interrupt status. If set, REFB indicates that a match was detected between the 
per Coe reference register (TBREFB) and TBL. REFB is cleared by writing a 1. 


Reserved, should be cleared. 


REFAE | Reference interrupt enable. If asserted, the timebase generates an interrupt on assertion of REFA or 
ReFBE| Otherwise, the interrupt is disabled. 


is freeze enable 
O The timebase and decrementer are unaffected. 
1 The FRZ signal stops the timebase and decrementer. 


Timebase enable 
0 Disables timebase and decrementer operation. 
1 Enables timebase and decrementer operation. 


10.10 The Real-Time Clock 


The real-time clock is a 45-bit counter, clocked by PITRTCLK, to provide time-of-day to 
the operating system and application software. The counter is not affected by HRESET, 
SRESET, or PORESET and operates in all low-power modes. It must be initialized by 
software. The real-time clock can be programmed to generate a maskable interrupt when 
the time value matches the value programmed in the associated alarm register. It can also 
be programmed to generate an interrupt once each second. A control and status register is 
used to selectively enable or disable functions and report the interrupt source. The real-time 
clock registers (RTCSC, RTC, RTSEC, and RTCAL) can be protected (locked) from 
accidental writes after PORESET through the use of key registers (RTCSCK, RTCK, 
RTSECK, and RTCALK), which are described in Section 10.4.5, “Register Lock 
Mechanism.” To unlock a register, write the key word 0Ox55CC_AA33 to the key registers. 





Note that the real-time clock will count in seconds only if PITRTCLK is supplied by a 
32.768 KHz or 38.4 KHz source. 
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yy SEC 
Interrupt 
PITRTCLK Clock 
Clock Disable by 8,192 
__. Alarm 
Interrupt 


32-Bit Register 





Figure 10-23. Real-Time Clock Block Diagram 


10.10.1 Real-Time Clock Status and Control Register (RTCSC) 


The real-time clock status and control register (RTCSC) is used to enable the different 
real-time clock functions and for reporting interrupt sources. Status bits are cleared by 
writing ones; writing zeros has no effect. Note that RT'CSC is a keyed register; it must be 
unlocked in RTCSCK before it can be written. 


=TORO sec] ain] — [ee | se [Le mre ae 
20000 pote fel-feleolfo|- 
R/W 


(IMMR & OxFFFFO000) + 0x220 
Figure 10-24. Real-Time Clock Status and Control Register (RTCSC) 





Table 10-20 describes RTCSC fields. 
Table 10-20. RTCSC Field Descriptions 


-time clock interrupt request. These bits control the real-time clock’s internal interrupt priority 


Once-per-second interrupt. Set every second; should be cleared by software. 
Alarm interrupt. Status bit set when the value of the real-time clock equals the value in RTCAL. 
Reserved, should be cleared. 


Real-time clock source select. Software must set 38K for the proper timing of a second. 
0 Assumes that PITRTCLK is driven by a 32.768-KHz crystal 
1 Assumes that PITRTCLK is driven by a 38.4-KHz crystal. 


Seconds interrupt enable. If set, the real-time clock generates an interrupt when SEC is set. 
Alarm interrupt enable. If set, the real-time clock generates an interrupt when ALR is set. 
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Table 10-20. RTCSC Field Descriptions (Continued) 


foe ee 


14 Real-time clock freeze enable 
0 The real-time clock is unaffected a the FRZ signal. 
1 The FRZ signal stops the real-time clock. 
15 [RTE Real-time clock enable. If set, real-time clock timers are enabled. 


10.10.2 Real-Time Clock Register (RTC) 


The 32-bit real-time clock register (RTC) contains the current value of the real-time clock. 
The maximum value is approximately 136 years. Note that RTC is a keyed register. It must 
be unlocked in RTCK before it can be written. 





R/W 
(IMMR & OxFFFFOOOO) + 0x224 


(IMMR & OxFFFFO000) + 0x226 
Figure 10-25. Real-Time Clock Register (RTC) 





Table 10-21 describes the RTC. 
Table 10-21. RTC Field aaseeails ata 


= ee 
Real-time clock. meuresenie time measured in seconds. Each unit represents one second. 


10.10.3 Real-Time Clock Alarm i’Ragister (RTCAL) 


The real-time clock alarm register (RTCAL) is an alarm reference register. When RTC 
increments to the value stored in this register, an alarm interrupt is generated. Note that 
RTCAL is a keyed register. It must be unlocked in RTCALK before it can be written. 
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(IMMR & OxFFFFOOOO) + 0x22E 


Figure 10-26. Real-Time Clock Alarm Register (RTCAL) 
Table 10-22 describes RTCAL fields. 
Table 10-22. RTCAL Field Descriptions 


seem [etn 
0-31 | ALARM | Alarm reference counter. Indicates that an alarm interrupt will be generated this field matches 
corresponding RTC bits. The alarm has a 1-second resolution. 


10.10.4 Real-Time Clock Alarm Seconds Register (RTSEC) 








RTSEC, shown in Figure 10-27, is an up-counter that increments once per PITRTCLK tick. 
Note that RTSEC is a keyed register. It must be unlocked in RTSECK before it can be 
written. 











(IMMR & OxFFFFOOOO) + 0x228 





(IMMR & OxFFFFOOOO) + O0x23A 


Figure 10-27. Real-Time Clock Alarm Seconds Register (RTSEC) 
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Table 10-23 describes RTSEC fields. 


Table 10-23. RTSEC Field Descriptions 
[ame [ee [ee 
0-13 | COUNTER | Counter bits (fraction of a second). Bit 13 is always the Isb of the count. It either resets at 8192 
or at 9600, as programmed. 


14-31 = | Reserved; should be cleared. 


Under normal conditions (RTCSC[38K] = 0), PITRTCLK is assumed to be 8192 Hz (4.192 
MHz/512 or 32.768 KHz/4). RTSEC resets at 8192 and increments RTC. Thus, RTC 
contains the time in seconds and RTSEC functions as a divider. For a 38.4-KHz crystal 
(instead of 32.768 KHz), RTCSC[38K] should be set to make RTSEC reset at 9600 instead 
of 8192. 









10.11 The Periodic Interrupt Timer (PIT) 


The PIT, shown in Figure 10-28, consists of a 16-bit counter clocked by a PITRTCLK clock 
supplied by the clock module. The PIT is not affected by HRESET and RESET; however, 
it is disabled and reset by PORESET. It decrements to zero when loaded with a value from 
the PIT count register (PITC) and after the timer reaches zero, PS is set and an interrupt is 
generated if PIE is a 1. At the next input clock edge, the PITC value is loaded into the 
counter and the process repeats. When a new value is loaded into PITC, the PIT is updated, 
the divider is reset, and the counter starts counting. If the PS bit is set, an interrupt is 
generated at the interrupt controller that remains pending until PS is cleared. If PS is set 
again, before being cleared, the interrupt remains pending until PS is cleared. Any write to 
PITC stops the current countdown and the count resumes with a new value in the PITC. If 
the PTE bit is not set, the PIT is unable to count and retains the old count value. Reading 
the PIT does not affect it. 








PITRTCLK 
Clock 


Clock 16-Bit 
Disable Modulus Counter 





PIT 
Interrupt 


Figure 10-28. Periodic Interrupt Timer Block Diagram 
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The time-out period is calculated as follows: 


PIT _ PITC+1_ PITC +1 
period pitrtclk Sere 4 
1 or 128 


Solving this equation using a 32.768-KHz external clock gives: 


PITC +1 


PlTperiod = 3192 


This gives a range from 122 us (PITC = 0x0000) to 8 seconds (PITC = OxFFFF). 


10.11.1 Periodic Interrupt Status and Control Register (PISCR) 


The periodic interrupt status and control register (PISCR), shown in Figure 10-29, contains 
the interrupt request level and status bits. It also controls the 16 bits to be loaded in a 
modulus counter. Note that PISCR is a keyed register. It must be unlocked in PISCRK 
before it can be written. 

















Figure 10-29. Periodic Interrupt Status and Control Register (PISCR) 





Table 10-24 describes PISCR fields. 
Table 10-24. PISCR Field Descriptions 


Periodic interrupt request level. Configures internal interrupt levels for periodic interrupts. 
Figure 10-7 shows interrupt request levels. 


Periodic interrupt status. Can be cleared by writing a 1 to it (zero has no effect). 
0 The PIT is unaffected. 
1 The PIT has issued an interrupt. 


Periodic interrupt enable 
0 Disables the PS bit. 
1 Enables the PS bit to generate an interrupt. 


PIT freeze enable 
0 The PIT is unaffected by the FRZ signal. 
1 The FRZ signal stops the PIT. 


Periodic timer enable 
O The PIT is disabled. 
1 The PIT is enabled. 
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10.11.2 PIT Count Register (PITC) 


PITC, shown in Figure 10-30, contains a 16-bit value to be loaded into the periodic 
interrupt down counter. Note that PITC is a keyed register. It must be unlocked in PITCK 
before it can be written. 


(IMMR & OxFFFFOOOO) + 0x244 


0000_0000_0000_0000 
(IMMR & OxFFFFO000) + 0x246 


Figure 10-30. PIT Count Register (PITC) 
Table 10-25 describes PITC fields. 
Table 10-25. PITC Field Descriptions 


hs 


PITC {PIT count. Contains the count for the periodic timer. Setting this field to OxFFFF selects the maximum 





count period. 


16-31 | Reserved, should be cleared. 


10.11.3 PIT Register (PITR) 


The PIT register (PITR) is a read-only register that shows the current value in the periodic 
interrupt down counter. Writes to PITR do not affect it; reads do not affect the counter. 












(IMMR & OxFFFFO000) + 0x248 





0000_0000_0000_0000 


: (IMMR & OxFFFFOOO0) + 0x24A 


Figure 10-31. PIT Register (PITR) 
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Table 10-26 describes PITR fields. 
Table 10-26. PITR Field Descriptions 


feel men 


Periodic interrupt timing count. Holds the current count remaining for the periodic timer. Writes do not 


affect PIT. 


16-31 p= Reserved, should be cleared. 


10.12 General SIU Timers Operation 


The following sections provide detailed information on the operation of the SIU timers. 





10.12.1 Freeze Operation 


The external FRZ signal is asserted as a result of entry into debug mode, or as a result of 
actions performed by a software monitor debugger as described in Section 36.4.1, “Freeze 
Indication.” When the FRZ signal is asserted, the clocks to the software watchdog, PIT, 
real-time clock, timebase counter, and decrementer can be disabled. This is controlled by 
the associated bits in the control register of each timer. If they are programmed to stop 
counting when FRZi1s asserted, the counters maintain their values until FRZ is negated. The 
bus monitor, however, will be enabled regardless of this signal’s state. 


10.12.2 Low-Power Stop Operation 

When the PowerPC core is set in a low-power mode (doze, sleep, deep sleep), the software 
watchdog timer is frozen. It remains frozen and maintains its count value until the core exits 
this mode and continues to execute instructions. The PIT, decrementer, and timebase are not 
affected by low-power modes and continue to run at their respective frequencies. These 
timers can generate an interrupt to bring the MPC850 out of the low-power modes. 
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Chapter 11 
Reset 


The reset block has reset control logic that determines the cause of reset, synchronizes it if 
necessary, and resets the appropriate logic modules. The memory controller, system 
protection logic, interrupt controller, and parallel I/O signals are initialized only on hard 
reset. Soft reset initializes the internal logic while maintaining the system configuration. 


Table 11-1. MPC850 Reset Responses 


Reset Effect 


Reset Source Reset Logic Other 
and PLL i i Internal 
States Reset i Logic Reset 


Power-on reset 


External hard reset, 

loss-of-lock, software 
watchdog, checkstop, 
debug port hard reset 


JTAG reset, external 
soft reset, debug port 
soft reset 





NOTE: Vv indicates that the logic circuitry is reset or the appropriate signal is driven by the source. 
— indicates that the logic circuitry is not affected. 


11.1 Types of Reset 
The MPC850 has several sources of input to the reset logic: 


¢ Power-on reset 
e External hard reset 
e Internal hard reset 
— Loss of lock 
— Software watchdog reset 
— Checkstop reset 
— Debug port hard reset 
e JTAG reset 
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e External soft reset 
e Internal soft reset 
— Debug port soft reset 
All of these reset sources are fed into the reset controller and, depending on the source of 


the reset, different actions are taken. The reset status register reflects the last source to cause 
a reset. 


11.1.1 Power-On Reset 


Power-on reset of the MPC850 is accomplished through the PORESET input signal. The 
PORESET signal must be externally asserted following initial power-up, or when the 
keep-alive power (KAPWR) voltage falls below the minimum required for proper system 
operation in systems providing a power-down mode. When PORESET is asserted the 
MODCK bits are sampled to configure SCCR[RTDIV] and SCCR[RTSEL]. The 
phase-locked loop multiplication factor is configured for default operation in the PLPRCR 
register. When PORESET is negated, the MODCK values are sampled and internally 
latched. To ensure proper operation, PORESET should be asserted for a minimum of 3 us. 
After sampling the assertion of PORESET, the MPC850 enters the power-on reset state and 
stays there until both of the following events occur: 


¢ The internal PLL enters the lock s state and the system clock 1s active. 
e PORESET is negated. 


After the negation of PORESET or PLL lock, the core enters the state of internal initiated 
HRESET and continues driving both HRESET and SRESET for 512 clock cycles. After 
512 cycles elapse, the MPC850’s configuration is sampled from the data signals and the 
core stops internally asserting both HRESET and SRESET. To ensure prompt negation, 
external pull-up resistors should be provided to drive HRESET and SRESET high. After 
HRESET and SRESET are internally negated, a 16-cycle period passes before the presence 
of an external (hard/soft) reset will be sampled. See Section 11.3.1, “Hard Reset,’ for more 
information. 


11.1.2 External Hard Reset 


The hard reset (HRESET) signal is a bidirectional, active low, open-collector I/O signal. 
The MPC850 can only sample an external assertion of HRESET if it occurs while the 
MPC850 is not internally asserting HRESET. While HRESET is asserted, SRESET is also 
asserted. 


11.1.3 Internal Hard Reset 


When the core initiates a hard reset it asserts the HRESET and SRESET signals for 512 
cycles. After 512 clock cycles the data signals are sampled, initial configuration is 
established, and the core stops driving the HRESET and SRESET signals. Following the 
negation of HRESET and SRESET a 16-cycle period passes before an external hard or soft 
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reset will be sampled. Note that external pull-up resistors should be provided to drive 
HRESET and SRESET high. See Section 11.3.1, “Hard Reset,’ for more information. 
The causes of internal hard reset are as follows: 

e PLL loss of lock 

e Software watchdog reset 

e Checkstop reset 

e Debug port hard reset 


The following sections describe the events that can initiate an internal assertion of HRESET 
and SRESET. 


11.1.3.1 PLL Loss of Lock 


If the PLL experiences a loss of lock erroneous external bus operation may occur. 
Erroneous operation can also occur if devices with a PLL use the core CLKOUT signal as 
a driver. If PLPRCR[LOLRE] = 1 and a PLL loss-of-lock event occurs, an internal hard 
reset sequence is generated. 


11.1.3.2 Software Watchdog Reset 


When SRS[SWRS] = | and the core watchdog counter decrements to zero, a software 
watchdog reset is asserted generating an internal hard reset sequence. 


11.1.3.3 Checkstop Reset 


If the core enters a checkstop state and PLPRCR[CSR] = 1, the checkstop reset is asserted 
generating an internal hard reset sequence. 


11.1.4 Debug Port Hard or Soft Reset 


When the development port receives a hard or soft reset request from a development tool, 
an internal hard or soft reset sequence is generated. The development tool must reconfigure 
the debug port following a reset event. See Section 36.3.2.1.2, “Development Serial Data 
In (DSDI).” 


11.1.5 JTAG Reset 


When the JTAG logic asserts the JTAG reset signal, an internal soft reset sequence is 
generated. 


11.1.6 Power-On and Hard Reset Sequence 


Figure 11-1 shows the reset sequence following a power-on or internal or external hard 
reset event. 
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® Sample MODCK pins and initialize clocks 
* HRESET and SRESET are asserted 


Power-On 
Reset 








Power On 





PORESET is Negated and PLL Lock 


Internally 
Initiated 
HRESET 


© HRESET and SRESET assert 
® The time counter is set to 512 


Internal or External 
HRESET Asserted 





Timer Expires (After 512 Clocks) 


® Sample configuration from data pins 
* Negate HRESET and SRESET 
® Wait for 16 clocks 


External HRESET 
Asserted 








16 Clocks Expire 
® Test for HRESET or SRESET 





Start Normal Operation 
(From system reset interrupt exception vector) 


Figure 11-1. Power-On and Hard Reset Sequence 


11.1.7 External Soft Reset 


When an external SRESET is asserted, the core starts driving the SRESET signal. After 512 
Clock cycles the debug port configuration is sampled from the DSDI and DSCK signals and 
the core stops driving the SRESET signal. Once the core negates SRESET 16 clock cycles 
must elapse before the external soft reset signal is again sampled. 


The soft reset (SSRESET) signal is also a bidirectional, active low, open-collector I/O signal. 
The MPC850 can detect an external assertion of SRESET only if it occurs while the 
MPC850 is not internally asserting HRESET or SRESET. 


11.1.8 Internal Soft Reset 


The JTAG and debug ports can initiate an internal soft reset, resulting in the assertion of the 
SRESET signal. After 512 cycles, the core negates SRESET and the debug port 
configuration is sampled from the DSDI and DSCK signals. Once the core negates 
SRESET, 16 clock cycles must elapse before the external soft reset signal is sampled. 


11.1.9 Soft Reset Sequence 


Figure 11-2 shows the reset sequence following an internal or external soft reset event. 
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Internal or external _ Internal initiated ° SRESET assert 
SRESET asserted SRESET * The time counter is set to 512 


Timer expires (after 512 clocks) 











* Sample debug port configuration from DSDI and DSCK pins 
* Negate SRESET 
* Wait for 16 clocks 


16 clocks expire 

& DSCK high External SRESET still asserted 

16 clocks expire 

Debug & DSCK low 
Mode 





Test for 
HRESET or 
SRESET 







* DSDI is sampled to determine 


clocked or self-clocked mode Start normal execution 


(From system reset interrupt exception vector) 


Figure 11-2. Soft Reset Sequence 


11.2 Reset Status Register (RSR) 


The 32-bit reset status register (RSR) is powered by the keep alive power supply. It is 
memory-mapped into the MPC850 system interface unit register map and receives its 
default reset values at power-on reset. 


EHRS|ESRs|LLRS | swrs|csrs|pBHRS|DBSRS| JTRS Pe 


0000_0000_0000_0000 


R/W 


0000_0000_0000_0000 





Figure 11-3. Reset Status Register (RSR) 


The RSR bits are described in Table 11-2. Note that the bits in this register (except those 
that are reserved) are cleared by writing ones; writing zeros has no effect. 
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Table 11-2. Reset Status Register Bit Settings 


ee [ten 


EHRS External hard reset status. Cleared by a power-on reset. When an external hard reset event is 
detected, EHRS is set and remains set until software clears it. 

0 No external hard reset event occurred. 

1 An external hard reset event occurred. 













External soft reset status. Cleared by a power-on reset. When an external soft reset event is 
detected, ESRS is set and remains set until software clears it. 

0 No external soft reset event occurred. 

1 An external soft reset event occurred. 








Loss-of-lock reset status. Cleared by a power-on reset. When a loss-of-lock event (enabled by 
PLPRCR[LOLRE)) is detected, LLRS is set and remains set until software clears it. 

0 No enabled loss-of-lock reset event occurred. 

1 An enabled loss-of-lock reset event occurred. 









Software watchdog reset status. Cleared by a power-on reset. When a software watchdog expire 
event occurs, SWRS is set and remains set until software clears it. 

0 No software watchdog reset event occurred. 

1 A software watchdog reset event occurred. 









Check stop reset Status. Cleared by a power-on reset. When the core enters the checkstop state 
and the checkstop reset is enabled by PLPRCR[CSR], CSRS is set and remains set until 
software clears it. . : 

0 No enabled checkstop reset event occurred. 

1 An enabled checkstop reset event occurred. 








Debug port hard reset status. Cleared by a power-on reset. When the debug port hard reset 
request is set, DBHRS is set and remains set until software clears it. 

0 No debug port hard reset request occurred. 

1 A debug port hard reset request occurred. 








Debug port soft reset status. Cleared by a power-on reset. When the debug port soft reset request 
is set, DBSRS is set and remains set until software clears it. 
0 No debug port soft reset request occurred. 

1 A debug port soft reset request occurred. 







JTAG reset status. Cleared by a power-on reset. When the JTAG reset request is set, this bit is set 
and remains set until software clears it. 

0 No JIAG reset event occurred. 

1 A JTAG reset event occurred. 


[ear [=[resenesendstousbecears 
11.3 MPC850 Reset Configuration 


When a hard reset event occurs, the MPC850 reconfigures both its internal hardware and 
the development port. A soft reset is used to reconfigure the development port without 
changing the MPC850’s internal machine state. The following sections describe the 
configuration of the MPC850 using hard and soft reset events. 
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11.3.1 Hard Reset 


When a hard reset event occurs, the MPC850 determines its initial mode of operation by 
sampling the values present on the data bus (D[O-—31]) or from an internal default constant 
(D[O—31] = Ox00000000). If the RSTCONF signal is asserted at sampling time, the 
configuration is sampled from the data bus. If the RSTCONF signal is negated the internal 
default value is selected. While HRESET and RSTCONE are asserted, the MPC850 weakly 
pulls the data bus low, and the desired configuration is selected by driving the appropriate 
bits high as shown in Figure 11-4. 


Figure 11-4 shows a typical data bus configuration input circuit. 


Configuration 
Word 













DX (Data Line) < | 
O 


MPC850 S 














® e HRESET 





RSTCONF 





NOTE: The value of the internal pulldown resistor is not specified or guaranteed. 


Figure 11-4. Data Bus Configuration Input Circuit 


The configuration of the MPC850 following the assertion of PORESET is shown in 
Figure 11-5 through Figure 11-7. While the PORESET input signal is being asserted, the 
core assumes the default reset configuration (OxO000_0000). When PORESET is negated 
or the CLKOUT signal begins oscillation, the hardware configuration is sampled from the 
data bus every nine clock cycles on the rising edge of CLKOUT. The setup time required 
for the data bus is 15 cycles and the maximum rise time of HRESET should be less than six 
clock cycles. Refer to Section 11.3.2, “Soft Reset,” for more information. 


Figure 11-5 shows a reset operation with a short PORESET signal assertion. Note that the 
configuration of the MPC850 is determined from the signal levels driven on the D[O-31] 
signals following the assertion of RSTCONE and the negation of HRESET. 


Re rr rr rr eT ee errr errr eee rrmmteteteeeeeettrrerr nner rmrnmrnrntntrrrnc inn nttrnrrrmrentmtrrnreneernmunrennneerertestntmmr rrr ner 
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CLKOUT 


PORESET 





INTPORESET 





HRESET 





RSTCONF 


D[0:31] 





<«— Default 











> 


RSTCONF Controlled 














al 


Figure 11-5. Reset Configuration Sampling for Short PORESET Assertion 


Figure 11-6 shows a reset operation with a long PORESET signal assertion. 


CLKOUT 





PORESET 


INTPORESET 





HRESET 





RSTCONF 


D{0:31] 


~<a 


XX 

















| 
»><t— RSTCONF Con 





trolled | 








Figure 11-6. Reset Configuration Sampling for Long PORESET Assertion 
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Figure 11-7 shows the configuration data sampling timing relative to HRESET and 
CLKOUT. 


0 1 2 3 4 5 6 7 8 9 10 11 #=+12 #13 «14«~«615~=«616~=«(17 


| | | | 


| 
l 


<— Maximum Time of Reset Recognition aaa 
RSTCONF 


| 
Data Reset Configuration Word 1 eK, ) 
| 


| 

| | 
< Maximum Setup Time of Reset Recognition > | | 

| | 
































Sample Data Sample Data Sample Data 
Configuration Configuration Configuration 


Figure 11-7. Reset Configuration Sampling Timing Requirements 


11.3.1.1 Hard Reset Configuration Word 


The hard reset configuration word is sampled from the data bus. These bits determine the 
default values of the corresponding bits in the SUUMCR, IMMR, and MSR. 


cana] w | [eos] ers [-| 15> | oecc | vero | eso | — 
0000_0000_0000_0000 


0000_0000_0000_0000 


NOTE: The default value is due to the internal pull-down resistor on the data bus. 


Figure 11-8. Hard Reset Configuration Word 





Table 11-3 describes hard reset configuration word fields. 


Table 11-3. Hard Reset Configuration Word Field Descriptions 


CC 


External arbitration. If this bit is set, external arbitration is assumed. If it is cleared, internal arbitration is 
performed. See Section 10.4.2, “SIU Module Configuration Register (SIUMCR).” 


Initial interrupt prefix. Defines the initial value of the MSRI[IP] which defines the interrupt table location. 


If IP is cleared (default), the MSRIIP] initial value is one; if it is set, the MSR[IP] initial value is zero. 
See Section 4.1.2.3.1, “Machine State Register (MSR).” 
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Table 11-3. Hard Reset Configuration Word Field Descriptions (Continued) 


En 


Z BDIS_ | Boot disable. If BDIS is set, memory bank 0 is invalid; that is, BRO[V] is cleared. (See Section 15.4.1, 





“Base Registers (BRx).”) 
0 The memory controller is activated after reset so that it matches all addresses. 





1 The memory controller is cleared after reset but is not activated. 
4-5 |BPS_ | Boot port size. Defines the port size of the boot device as shown in the following chart. 
00 32-bit port size. 
01 8-bit port size. 
10 16-bit port size. 
11 Reserved. 
le |- | Reserved for future use and should be allowed to float. 
7-8 {ISB Initial internal space base select. Defines the initial value of the IMMR bits 0-15 and determines the 
base address of the internal memory space. 
00 Ox00000000. 
01 OxOOFOOOO0. 
10 OxFFOOOOOO. 
11 OxFFFOOOOO. 
9-10 | DBGC | Debug pin configuration. Selects the signal function of the following pins: 
DBGC = 00 DBGC = 01 DBGC = 10 - DBGC = 11 
IP_B[O—1]/IWP[O—1]/VFLS[0—1] | |P_B[0O-1] IWP[O-1] Reserved VFLS[O-1] | 
IP_B3/IWP2/VF2 IP_B3 IWP2 VF2 
IP_B4/LWP0O/VFO IP_B4 LWPO VFO 
IP_B5/LWP1/VF1 IP_B5 
| OP2/MODCK1/STS 
ALE_B/DSCK/AT1 ALE_B 
IP_B2/01S16_B/AT2 IP_B2 


IP_B6/DSDI/ATO IP_B6 
IP_B7/PTR/AT3 IP_ B7 


OP3/MODCK2/DSDO 


= 
= 
a U 
a_i, 
n 
es | 
) 


11— |DBPC | Debug port pins configuration. Selects the signal function for the following development port pins: 


12 
) Pin. =| pPc=00 | pePC=01 | DBPC=10 | DBPC=11 


ALE JALEB/DSCKATI = Defined by DBGC. Reserved DSCK 
ae that if DBPC =11,DBPC — 
overrides DBGC. ees 

DSDO 
IP_B7/PTR/AT3 PTR 


TCK/DSCK DSCK Tek | TCK 
TDIDSDI DSDI TO TDI 
TDO/DSDO DSDO TDO 


IP_B6/DSDI/ATO 
OP3/MODCK2/DSDO 








11-10 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part Ill. Configuration and Reset 


Table 11-3. Hard Reset Configuration Word Field Descriptions (Continued) 


Belen 


13— |EBDF | External bus division factor. Defines the frequency division factor between GCLK1/GCLK2 and 
14 GCLK1_50/GCLK2_50. CLKOUT is similar to GCLK2_50. GCLK2_50 and GCLK1_50 are used by the 


system interface unit and memory controller to interface with the external system. Refer to Chapter 14, 
“Clocks and Power Control” for additional information. 

00 Full speed bus 

01 Half speed bus 

10 Reserved 

11 Reserved 


1s [= Reserved. This bit is reserved for future use and should be allowed to float. 


11.3.2 Soft Reset 


When a soft reset event occurs, the MPC850 reconfigures the development port. See 
Section 36.3.1.2, “Entering Debug Mode,’ and Section 36.3.2.3.3, “Selection of 
Development Port Clock Mode.” 





11.4 TRST and Power Mode Considerations 


Note the following when connecting the TRST (test reset) signal: 


e If both low power mode and the TAP are never used, connect TRST to ground. 
e If low power mode (or the TAP) is used, connect TRST to PORESET. 


¢ If power down mode (the lowest power mode, where Vppy is disabled) is used, 


connect TRST to PORESET through a diode (anode to TRST, cathode to 
PORESET). 


See also Section 37.6, “Recommended TAP Configuration.” 
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Intended Audience 


Part IV is intended for system designers who need to understand how each MPC850 signal 
works and how those signals interact. 


Contents 


Part IV descibes external signals, clocking, memory control, and power management of the 
MPC850. 


It contains the following chapters: 


e¢ Chapter 12, “External Signals,’ provides a detailed description of the external 
signals that comprise the MPC850 external interface. 


¢ Chapter 13, “External Bus Interface,’ describes the interaction between signals 
described in the previous chapter, including numerous examples and timing 
diagrams. 


e Chapter 14, “Clocks and Power Control,’ describes on-chip and external devices, 
including the phase-locked loop circuitry and frequency dividers that generate 
programmable clock timing for baud-rate generators, timers, and a variety of low- 
power mode options. 


e Chapter 15, “Memory Controller,’ describes the memory controller, which 
controlling a maximum of eight memory banks shared between a general-purpose 
chip-select machine (GPCM) and a pair of user-programmable machines (UPMs). 


e Chapter 16, “PCMCIA Interface,’ describes the PCMCIA host adapter module, 
which provides all control logic for a PCMCIA socket interface and requires only 
additional external analog power switching logic and buffering. 
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Suggested Reading 


This section lists additional reading that provides background for the information in this 
manual as well as general information about the PowerPC architecture. 


MPC8xx Documentation 


Supporting documentation for the MPC850 can be accessed through the world-wide web 
at http://www.motorola.com/SPS/RISC/netcomm. This documentation includes technical 
specifications, reference materials, and detailed applications notes. 


PowerPC Documentation 
The PowerPC documentation is organized in the following types of documents: 


¢ PowerPC Microprocessor Family: The Bus Interface for 32-Bit Microprocessors 
(Motorola order #: MPCBUSIF/AD) provides a detailed functional description of 
the 60x bus interface, as implemented on the PowerPC 601™ , 603, and 604 family 
of PowerPC microprocessors. This document is intended to help system and chip set 
developers by providing a centralized reference source to identify the bus interface 
presented by the 60x family of PowerPC microprocessors. 


¢ Application notes—These short documents contain useful information about 
specific design issues useful to programmers and engineers working with PowerPC 
processors. 


For a current list of PowerPC documentation, refer to the world-wide web at http:// 
www.mot.com/powerpc/. 


Conventions 

This document uses the following notational conventions: 

Bold entries in figures and tables showing registers and poems 
RAM should be initialized by the user. 

mnemonics Instruction mnemonics are shown in lowercase bold. 

italics Italics indicate variable command parameters, for example, bectrx. 
Book titles in text are set in italics. 

Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
mode enable bit in the machine state register. 


X In certain contexts, such as in a signal encoding or a bit field, 
indicates a don’t care. 


n Indicates an undefined numerical value 
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a: ~NOT logical operator 
& AND logical operator 
| OR logical operator 


Acronyms and Abbreviations 


Table 1 contains acronyms and abbreviations used in this document. Note that the meanings 
for some acronyms (such as SDR1 and DSISR) are historical, and the words for which an 
acronym stands may not be intuitively obvious. 


Table ix. Acronyms and Abbreviated Terms 


ES 
fart [eiccraememies 
Le: (aaa ree 
[cast [Emnerteatesniowensy 
[cru | Conmuneaion pesssrmaaie 
Ca 
CaaaE 


















i 
[eo [events 
[ia "= NON 
fo neste deine 
[eee [hats onal ow Saori Saws 
fro [edawasonin 
a 
[se [settee 
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Table ix. Acronyms and Abbreviated Terms (Continued) 
Term 


Least-significant bit 


LSU Load/store unit 
MAC Multiply accumulate 


MMU Memory management unit 


| Most-significant byte 


Most-significant bit 


MSR Machine state register 
NMSI Nonmultiplexed serial interface 


Open systems interconnection 


© 


Peripheral component interconnect 
PCMCIA Personal Computer Memory Card International Association 
Primary rate interface 

Receive 

SCC Serial communications controller 


CP 


; 


Serial control port 


SDLC Synchronous data link control 


SDMA Serial DMA 


2) 


Serial interface 
SIU System interface unit 

SMC Serial management controller 
SNA Systems network architecture. 
SPI Serial peripheral interface 
Special-purpose register 


SRAM Static random access memory 


TDM Time-division multiplexed 


TLB Translation lookaside buffer 


TSA Time-slot assigner 
Transmit 

UART Universal asynchronous receiver/transmitter 
UISA User instruction set architecture 
UP 


USART 


= 


User-programmable machine 


Universal synchronous/asynchronous receiver/transmitter 
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External Signals 


This chapter contains descriptions of the MPC850 input and output signals, showing 
multiplexing, pin assignments, and reset values. 


Figure 12-1 shows the signals grouped by function. Figure 12-2 and Figure 12-3 show the 
signals with their Motorola proprietary (non-JEDEC) pin numbering. 
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VDDSYN/VSSSYN/VSSSYN1/KAPWR/VDDH/VDDL/VSS 


12-2 


USBRXD/PA[15] 
USBOE/PA[14] 
RXD2/PA[13] 
TXD2/PA[12] 
SMRXD2/LITXDA/PA[9] 
SMTXD2/LIRXDA/PA[8] 





TIN1/LIRCLKA/BRGO1/CLK1/PA[7] 





TIN3/TOUT1/CLK2/PA[6] 


TIN2/L1TCLKA/BRGO2/CLK3/PA[5] 


TIN4/TOUT2/CLK4/PA[4] 
SPISEL/PB[31] 
TXD3/SPICLK/PB[30] 
RXD3/SPIMOSI/PB[29] 
BRGO3/SPIMISO/PB[28] 
BRGO1/I2CSDA/PB[27] 
BRGO2/I2CSCL/PB[26] 
TXD3/SMTXD1/PB[25] 
RXD3/SMRXD1/PB[24] 
SMSYNI/SDACK1/PB[23] 
SMSYN2/SDACK2/PB[22] 
LISTI/PB[19] 
L1ST2/RTS2/PB[18} 
L1ST3/PB[17] 
‘L1ST4/L1RQA/PB[16] 
LISTS/DREQO/PC[15] 








L1ST6/RTS2/DREQ1/PC[14] 


RTS3/L1ST7/PC[13] 
L1IST8/LIRQA/PC{12] 
USBRXP/PC[11] 
USBRXN/TGATE1/PC{10] 
CTS2/PC[9] 
TGATEI/CD2/PC[8] 
USBTXP/PC[7] 
USBTXN/PC[6] 





CTS3/SDACK 1/LITSYNCA/PC[5] 


CD3/LIRSYNCA/PC[4] 
PD[15] 
PD[14] 


PD[13] < 


PD{12] 
PD[11] 
PD[10] 

PD[9] 
PD[8] 
PD{7] 
PD[6] 
PD{5] 
PD/4] 
PD[3] 

TMS 
TDI/DSDI 
TCK/DSCK 
TRST 
TDO/DSDO 


Figure 12-1. MPC850 Signals Group 
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A(6:31)___ 
TSIZO/REG 
TSIZ1_ 
RD/WR 
BURST 
BDIP/GPL_B5 
TS 

TA_ 

TEA 





ae VRC 


KR/RETRY/IRQ4/SPKROUT 
DO:31)___ 
DP(0:3)/IRQ(3:6) 

BR 

BG 

BB 

FRZ/IRQ6 

IRQ(0:1) 


TRQ7 


CS(0:5) 
CS6/CE1_B 

CS7/CE2_B 
WE0/BS_ABO/IORD. 
WEI/BS_ABI/IOWR 
WE2/BS_AB2/PCOE 
WE3/BS_AB3/PCWE 
GPL_A0/GPL_BO 

OE/GPL AI/GPL BI __ 
GPL_A(2:3)/GPL_B(2:3/CS(2:3) 
UPWAITA/GPL_A4/AS 
UPWAITB/GPL_B4 
GPL_AS_ 

PORESET 

RSTCONF 

HRESET 

SRESET 

XTAL 

EXTAL 

XFC 

CLKOUT 

EXTCLK 

TEXP 

ALE _B/DSCK/AT1 
WAIT B 
IP_B(0:1)/IWP(0:1)/VFLS(0:1) 
IP_B2/IOIS16 B/AT2 
IP_B3/IWP2/VF2 
IP_B4/LWPO/VFO 
IP_BS/LWP1/VF1 
IP_B6/DSDI/ATO 
IP_B7/PTR/AT3__ 
OP2/MODCK1/STS 
OP3/MODCK2/DSDO 
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VDDSYN/VSSSYN/VSSSYNI/ 








KAPWR/VDDH/VDDL/VSS/GND VDDSYN—B1 
USBRXD/PA[I5]  < VSSSYN —AI 
USBOE/PA[I4] < VSSSYN1—A2 

RXD2/PA[13]  < KAPWR—A3 








TXD2/PA[12] < 
SMRXD2/LITXDA/PA[9] < 
SMTXD2/LIRXDA/PA[8]  < 

TINI/LIRCLKA/BRGOI/CLK1/PA[7]  < 


TIN3/TOUTI/CLK2/PA[6]_ < 
TIN2/L1TCLKA/BRGO2/CLK3/PA[5] < 


TIN4/TOUT2/CLK4/PA[4]  < 
SPISEL/PB[31] < 
TXD3/SPICLK/PB[30]  < 
RXD3/SPIMOSI/PB[29]_ < 
BRGO3/SPIMISO/PB[28]  < 
BRGOI/I2CSDA/PB[27] < 
BRGO2/I2CSCL/PB[26] < 
TXD3/SMTXD1/PB[25]  < 
RXD3/SMRXDI1/PB[24] < 
SMSYNI/SDACK1/PB[23]  < 
SMSYN2/SDACK2/PB[22]_ < 
LISTI/PB[19]  < 
LIST2/RTS2/PB[18] < 
LIST3/PB[17] < 
LIST4/LIRQA/PB[16] < 
LISTS/DREQO/PC[I5] < 
LIST6/RTS2/DREQU/PC[14] < 
RTS3/LIST7/PC[13]  < 
LISTS/LIRQA/PC[12] < 
USBRXP/PC[11] < 
USBRXN/TGATEI/PC[10] < 
CTS2/PC[9] < 
TGATEI/CD2/PC[8] < 
USBTXP/PC[7]  < 
USBTXN/PC[6] < 
CTS3/SDACKI/LITSYNCA/PC[5] < 
CD3/LIRSYNCA/PC[4] < 
PD[15] < 
PD[14] < 
PD[13] < 
PD[12] < 
PD[11] < 
PD[10] < 
PD[9] < 
PD[8] < 
PD[7] < 
PD[6] < 
PD[S] < 
PD[4] < 
PDI3] < 
TMS —— 
TDIDSDI —— 
TCK/DSCK =—— 
TRST —— 

TDO/DSDO < 


Figure 12-2. MPC850 Signals and Pin Numbers (Part 1) 


VDDH—E5-12, F5, F12, GS, G12, 
ve ie J5, J12, K5, K12, LS, £12, 











VDDL—A7, G1, J16, T7 


GND—F6-11, G6—11, H6-11,J6-11, 
K6-11, L6-11 
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A6—M13 
A7—N15 
A8&—N16 
AI—M15 
A1O0—L13 
All1—M16 
Al2—M14 
A13—L14 
Al4—LI5 
A15—L16 
Al6—K14 
A17—K13 


A1l8—G13 


A19—K15 
A20—J15 
A21—J14 

A22—G14 

A23—H15 

A24—H13 

A25—H14 
A26—F 14 

A27—K16 

A28—G16 

A29—H16 

A30—GI15 
A31—F16 


DO—MI1 


D1I—LI1 
D2—J2 
D3—Jl 

D4—L2 

DS5—H1 
D6—F 1 

D7—E1 

D8—M2 
D9I—K2 
D10—K3 
D11—K1 
D12—-M4 
D1i3—M3 
D14—J3 
D15—J4 
D16—H2 
D17—K4 
D18—H3 
D19—G2 
D20—G3 
D21—F2 
D22—H4 
D23—L4 
D24—F3 
D25—-G4 
D26—E4 
D27—L3 
D28—F4 
D29—E2 
D30—D2 
D31—E3 


C3, D4, D3, C2 


Bll 
C10 
All 
Al0 
NI, N2 
N3 


D12, Al4, B14, Al5, B16, D13 § 


C14 
B15 
D16 
E16 
D15 
F13 
E13 
C16 
C15, D14 
Dil 
B13 
C12 
B3 
C5 
B5 
B4 
A4 
AS 
B2 
DI 
A6 
D5 
B8 
C4 


D7 
A9 
B9 
C9 
C7 
D8 
D6 
B6 





A(6:31) 
TSIZO/REG 

TSIZI_ 

RD/WR 

BURST 

BDIP/GPL_B5 

TS 

TA_ 

TEA 

BI 

RSV/ARQ2 
KR/RETRY/IRQ4/SPKROUT 
D(0:31) 

DP(0:3)/IRQ(3:6) 

BR 

BG 

BB ree 

FRZ/IRQ6 











——— IRQ(0:1) 
———— IRQ7 


CS(0:5) 

CS6/CE1_B 

CS7/CE2_ Bo, 
WEO0/BS_ABO/IORD_ 
WE1/BS_AB1/IOWR 
WE2/BS_AB2/PCOE 
WE3/BS_AB3/PCWE 
GPL_A0/GPL_BO 
OF/GPL_AI/GPL.BI 
GPL_A(2:3)/GPL_B(2:3)/CS(2:3) 
UPWAITA/GPL_A4/AS 
UPWAITB/GPL_B4 
GPL A5 

PORESET 

RSTCONF 

HRESET 

SRESET 

XTAL 

EXTAL 

XFC 

CLKOUT 

EXTCLK 

TEXP 

ALE _B/DSCK/ATI 
WAIT B 
IP_B(0:1)/IWP(0:1)/VFLS(0:1) 
IP_B2/IOIS16_B/AT2 
IP_B3/IWP2/VF2 
IP_B4/LWP0/VFO 
IP_B5/LWP1/VFI 
IP_B6/DSDV/ATO 
IP_B7/PTR/AT3___ 
OP2/MODCK1/STS 
OP3/MODCK2/DSDO 
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Part IV. The Hardware Interface 


12.1 System Bus Signals 


The MPC850 system bus consists of all signals that interface with the external bus. Many 
of these signals perform different functions, depending on how the user assigns them. The 
input and output signals, described in Table 12-1, are identified by their abbreviation. Note 
that the pin numbering shown is Motorola proprietary (non-JEDEC). 


Table 12-1. Signal Descriptions 


ane [ew mer [me Om 


A(6-31] Hi-Z See Bidirectional | Address Bus—Provides the address for the current bus cycle. 
Figure 12-3 | Three-state 
TSIZO Hi-Z 


AO is the msb. The bus is output when an internal master 
starts a transaction on the external bus. The bus is input when 
F15 Bidirectional 
Three-state 









an external master starts a transaction on the bus. 















Transfer Size O—When accessing a slave in the external bus, 
used (together with TSIZ1) by the bus master to indicate the 
number of operand bytes waiting to be transferred in the 
current bus cycle. TSIZO is an input when an external master 
starts a bus transaction. 

Register—When an internal master initiates an access to a 
slave controlled by the PCMCIA interface, REG is output to 
indicate which space in the PCMCIA card is accessed. 










Bidirectional 
Three-state 










Transfer Size 1—Used (with TSIZO) by the bus master to 
indicate the number of operand bytes waiting to be transferred 
in the current bus cycle. The MPC850 drives TSIZ1 when it is 
bus master. Input when an external master starts a bus 
transaction. 













Read/Write — Driven by a bus master to indicate the direction 
of the data transfer. A logic one indicates a read from a slave 
device and a logic zero indicates a write to a slave device. 
The MPC850 drives this signal when it is bus master. Input 
when an external master initiates a transaction on the bus. 


Bidirectional 
Three-state 

















Burst Transaction— Driven by the bus master to indicate that 
the current initiated transfer is a burst. The MPC850 drives this 
signal when it is bus master. Input when an external master 
initiates a transaction on the bus. 


Bidirectional 
Three-state 

















Burst Data in Progress— When accessing a slave device in the 
external bus, the master on the bus asserts this signal to 
indicate that the data beat in front of the current one is the one 
requested by the master. BDIP is negated before the expected 
last data beat of the burst transfer. 

General-Purpose Line B5— Used by the memory controller 
when UPMB takes control of the slave access. 


Bidirectional 
Three-state 






















Transfer Start—Asserted by a bus master to indicate the start 
of a bus cycle that transfers data to or from a slave device. 
Driven by the master only when it has gained the ownership of 
the bus. Every master must negate TS before relinquishing the 
bus. TS requires the use of an external pull-up resistor. 

The MPC850 samples TS when it is not the external bus 
master to allow the memory controller/PCMCIA interface to 
control the accessed slave device. It indicates that an external 
synchronous master initiated a transaction. 


Bidirectional 
Active 
Pull-up 
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Table 12-1. Signal Descriptions (Continued) 
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Bidirectional Transfer Acknowledge—Indicates that the slave device 
addressed in the current transaction accepted data sent by the 
master (write) or has driven the data bus with valid data (read). 
Output when the PCMCIA interface or memory controller 
controls the transaction. The only exception occurs when the 
memory controller controls the slave access by means of the 
GPCM and the corresponding option register is instructed to 
wait for an external assertion of TA. Every slave device should 
negate TA after a transaction ends and immediately 
three-state it to avoid bus contention if a new transfer is 
initiated addressing other slave devices. TA requires the use of 
an external pull-up resistor. 




























Open-drain | Transfer Error Acknowledge— Indicates that a bus error 
occurred in the current transaction. The MPC850 asserts TEA 
when the bus monitor does not detect a bus cycle termination 
within a reasonable amount of time. Asserting TEA terminates 
the bus cycle, thus ignoring the state of TA. TEA requires the 


use of an external pull-up resistor. 































Burst Inhibit—Indicates that the slave device addressed in the 
current burst transaction cannot support burst transfers. 
Output when the PCMCIA interface or the memory controller 
takes control of the transaction. BI requires the use of an 
external pull-up resistor. 


Bidirectional 
Active 
Pull-up 










Reservation— The MPC850 outputs RSV in conjunction with 
the address bus to indicate that the core initiated a transfer as 
a result of a stwex. or lwarx. . 

Interrupt Request 2—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. 


Bidirectional 
Three-state 









Kill Reservation—Input used as a part of the memory 
reservation protocol, when the MPC850 initiated a transaction 
as the result of a stwex. instruction. 
Retry—Input used by a slave device to indicate it cannot 
accept the transaction. The MPC850 must relinquish 
mastership and reinitiate the transaction after winning in the 
bus arbitration. 

Interrupt Request 4. One of eight external inputs that can 
request (by means of the internal interrupt controller) a service | 
routine from the core. Note that the interrupt request signal 
that is sent to the interrupt controller is the logical AND of this 
line (if defined as IRQ4) and DP1/IRQ4 (if defined as IRQ4). 
SPKROUT — Digital audio wave form output to be driven to the 
system speaker. 


KR/RETRY 
IRQ4 
SPKROUT 















Bidirectional 
Three-state 




























Data Bus—Provides the general-purpose data path between 
the MPC850 and all other devices. The 32-bit data path can be 
dynamically sized to support 8-, 16-, or 32-bit transfers. DO is 
the msb of the data bus. 


D[0-31]. Hi-Z! See Bidirectional 
Figure 12-3 | Three-state 
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Table 12-1. Signal Descriptions (Continued) 
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Bidirectional | Data Parity O—Provides parity generation and checking for 
Three-state | D[O-7] for transfers to a slave device initiated by the MPC850. 
The parity function can be defined independently for each one 
of the addressed memory banks (if controlled by the memory 
controller) and for the rest of the slaves sitting on the external 
bus. Parity generation and checking is not supported for 
external masters. 

Interrupt Request 3—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. 



















Data Parity 1— Provides parity generation and checking for 
D[8—15] for transfers to a slave device initiated by the 
MPC850. The parity function can be defined independently for 
each one of the addressed memory banks (if controlled by the 
memory controller) and for the rest of the slaves on the 
external bus. Parity generation and checking is not supported 
for external masters. 

Interrupt Request 4—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. Note that the interrupt request signal 
sent to the interrupt controller is the logical AND of this line (if 
defined as IRQ4) and KR/IRQ4/SPKROUT (if defined as 
IRQ4). 


Bidirectional 
Three-state 




































Data Parity 2—Provides parity generation and checking for 
D[16—23] for transfers to a slave device initiated by the 
MPC850. The parity function can be defined independently for 
each one of the addressed memory banks (if controlled by the 
memory controller) and for the rest of the slaves on the 
external bus. Parity generation and checking is not supported 
for external masters. 

Interrupt Request 5—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. 


Bidirectional | 
Three-state 


















| Bidirectional 
Three-state | 


Data Parity 3—Provides parity generation and checking for 
D[16-—23] for transfers to a slave device initiated by the 
MPC850. The parity function can be defined independently for 
each one of the addressed memory banks (if controlled by the 
memory controller) and for the rest of the slaves on the 
external bus. Parity generation and checking is not Supported 
for external masters. 

Interrupt Request 6—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. Note that the interrupt request signal 
sent to the interrupt controller is the logical AND of this line (if 
defined as IRQ6) and the FRZ/IRQ6 (if defined as IRQ6). 























Bus Request— Asserted when a possible master is requesting 
ownership of the bus. When the MPC850 is configured to work 
with the internal arbiter, this signal is configured as an input. 
When the MPC850 is configured to work with an external 
arbiter, this signal is configured as an output. 


Bidirectional 
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Table 12-1. Signal Descriptions (Continued) 
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Bidirectional | Bus Grant—Asserted when the arbiter of the external bus 
grants the bus to a specific device. When the MPC850 is 
configured to work with the internal arbiter, BG is configured 
as an output and asserted every time the external master 
asserts BR and its priority request is higher than any internal 
sources requiring a bus transfer. However, when the MPC850 
is configured to work with an external arbiter, BG is an input. 






























Bidirectional 
Active 
Pull-up 


Bus Busy—Asserted by a master to show that it owns the bus. 
The MPC850 asserts BB after the arbiter grants it bus 
ownership and BB is negated. 





Bidirectional | Freeze— Output asserted to indicate that the core is in debug 
mode. 

Interrupt Request 6—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. Note that the interrupt request signal 
sent to the interrupt controller is the logical AND of FRZ/IRQ6 


(if defined as IRQ6) and DP3/IRQ6 (if defined as IRQ6). 




























Interrupt Request O—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. 


Di2, Al4, Output 

B14, A15, 

B16, D13 
of 
- 






Interrupt Request 1—One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. 






Interrupt Request 7— One of eight external inputs that can 
request (by means of the internal interrupt controller) a service 
routine from the core. 






Chip Select— These outputs enable peripheral or memory 
devices at programmed addresses if they are appropriately 
defined. CSO can be configured to be the global chip-select for 
the boot device. 






Chip Select 6— This output enables a peripheral or memory 
device at a programmed address if defined appropriately in the 
BR6 and OR6 in the memory controller. 

Card Enable 1 Slot B— This output enables even byte transfers | 
when accesses to the PCMCIA Slot B are handled under the 
control of the PCMCIA interface. 













Chip Select 7— This output enables a peripheral or memory 
device at a programmed address if defined appropriately in the 
BR7 and OR7 in the memory controller. 

Card Enable 2 Slot B—This output enables odd byte transfers 
when accesses to the PCMCIA Slot B are handled under the 
control of the PCMCIA interface. 
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Table 12-1. Signal Descriptions (Continued) 
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High D16 Output Write Enable 0O— Output asserted when a write access to an 
external slave controlled by the GPCM is initiated by the 
MPC850. WEO is asserted if D[O-7] contains valid data to be 
stored by the slave device. 
Byte Select O on UPMA or UPMB— Output asserted under 
control of the UPMA or UPMB, as programmed by the user. In 
a read or write transfer, the line is only asserted if D[O—7] 
| contains valid data. 
lO Device Read— Output asserted when the MPC850 starts a 
read access to a region controlled by the PCMCIA interface. 
Asserted only for accesses to a PC card I/O space. 
High Write Enable 1— Output asserted when the MPC850 initiates a 
write access to an external slave controlled by the GPCM. 
WE1 is asserted if D[8—15] contains valid data to be stored by 
the slave device. 
Byte Select 1 on UPMA or UPMB— Output asserted under 
control of the UPMA or UPMB, as programmed by the user. In 
a read or write transfer, the line is only asserted if D[8—15] 
contains valid data. 
I/O Device Write— This output is asserted when the MPC850 
initiates a write access to a region controlled by the PCMCIA 
interface. IOWR is asserted only if the access is to a PC card 
I/O space. | 
High Output Write Enable 2—Output asserted when the MPC850 starts a 
write access to an external slave controlled by the GPCM. 
WE2 is asserted if D[16—23] contains valid data to be stored 
by the slave device. 
_ | Byte Select 2 on UPMA or UPMB— Output asserted under 
control of the UPMA or UPMB, as programmed by the user. In 
a read or write transfer, BS_B2 is asserted only D[16—23] 
contains valid data. 
PCMCIA Output Enable— Output asserted when the MPC850 
initiates a read access to a memory region under the control of 
the PCMCIA interface. 


High F13 Write Enable 3— Output asserted when the MPC850 initiates a 
write access to an external slave controlled by the GPCM. 
WES is asserted if D[24—31] contains valid data to be stored 
by the slave device. 
Byte Select 3 on UPMA or UPMB— Output asserted under 
control of the UPMA or UPMB, as programmed by the user. In 
a read or write transfer, BS_B3 is asserted only if D[24—31] 

| contains valid data. 

PCMCIA Write Enable— Output asserted when the MPC850 





initiates a write access to a memory region under control of 
the PCMCIA interface. 


High E13 Output General-Purpose Line 0 on UPMA—This output reflects the 
| value specified in the UPMA when an external transfer to a 
slave is controlled by the UPMA. 
General-Purpose Line 0 on UPMB—This output reflects the 
. value specified in the UPMB when an external transfer to a 


slave is controlled by the UPMB. 
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Table 12-1. Signal Descriptions (Continued) © 
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Output Enable — Output asserted when the MPC850 initiates a 
read access to an external slave controlled by the GPCM. 
General-Purpose Line 10n UPMA—This output reflects the 
value specified in the UPMA when an external transfer to a 
slave is controlled by UPMA. 

General-Purpose Line 1 on UPMB—This output reflects the 
value specified in the UPMB when an external transfer to a 
slave is controlled by UPMB. 





































General-Purpose Line 2 and 3 on UPMA— These outputs 
reflect the value specified in the UPMA when an external 
transfer to a slave is controlled by UPMA. 
General-Purpose Line 2 and 3 on UPMB— These outputs 
reflect the value specified in the UPMB when an external 
transfer to a slave is controlled by UPMB. 

Chip Select 2 and 3—These outputs enable peripheral or 
memory devices at programmed addresses if they are 
appropriately defined. The double drive capability for CS2 and 
CS3 is independently defined for each signal in the SIUMCR. 





Bidirectional |User Programmable Machine Wait A—This input is sampled 
as defined by the user when an access to an external slave is 
controlled by the UPMA. 

General-Purpose Line 4 on UPMA—This output reflects the 
value specified in the UPMA when an external transfer to a 
_|slave is controlled by UPMA. 

Address Strobe—AS is driven by an external asynchronous 
master to indicate a valid address on the A[6:31] lines. The 
memory controller in the MPC850 will synchronize this signal 
and access the memory device addressed if it is recognized to 
be under its control. 


User Programmable Machine Wait B—This input is sampled | 
as defined by the user when an access to an external slave is 
controlled by the UPMB. 

General-Purpose Line 4 on UPMB—This output reflects the 
value specified in the UPMB when an external transfer to a 
slave is controlled by UPMB. | 





Bidirectional 


General-Purpose Line 5 on UPMA— This output reflects the 

value specified in the UPMA when an external transfer to a 
slave is controlled by UPMA. This signal can also be controlled 
by the UPMB. 


PORESET Input Power on Reset— When asserted, this input causes the 
MPC850 to enter the power-on reset state. 


RSTCONF i-Z Reset Configuration— The MPC850 samples this input while 
| HRESET is asserted. If RSTCONF is asserted, the 
| . : configuration mode is sampled in the form of the hard reset. 
| configuration word driven on the data bus. When RSTCOMF jis . 
negated, the MPC850 uses the default configuration mode. 
Note that the initial base address of internal registers is 
determined in this sequence. 


HRESET Low Open-drain |Hard Reset—Asserting this signal puts the MPC850 in hard 
| . reset state. 





Output 
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Table 12-1. Signal Descriptions (Continued) 






























SRESET Low B4 Open-drain | Soft Reset— Asserting this signal puts the MPC850 in soft 
reset state. 
XTAL Analog A4 Analog Output connection to an external crystal for the internal 
Driving Output oscillator circuitry. 
EXTAL Hi-Z A5 Analog Input | Input connection to an external crystal for the internal oscillator 
| (3.3V only) | circuitry. 
XFC Analog B2 Analog Input | External Filter Capacitance—This input is the connection pin 
Driving for an external capacitor filter for the PLL circuitry. 
CLKOUT }Note?} D1 | Output | Clock Out— This output is the clock system frequency. 
EXTCLK Hi-Z A6 Input (3.3V | External Clock—This input is the external input clock from an 
only) external source. 
TEXP High D5 Output Timer Expired— This output reflects the status of 
PLPRCR[TEXPS]. 
WAIT_B Hi-Z C4 Input Wait Slot B—This input, if asserted, causes a delay in the 
completion of a transaction on the PCMCIA controlled Slot B. 
ALE_B See B8 Bidirectional | Address Latch Enable B—This output is asserted when the 
DSCK Section Three-state | MPC850 initiates an access to a region under the control of 


the PCMCIA socket B interface. 

Development Serial Clock—This input is the clock for the 
debug port interface. 

Address Type 1— The MPC850 drives AT1 when it initiates a 
transaction on the external bus. When the transaction is 
initiated by the core, it indicates if the transfer is for user or 
supervisor state. AT1 is not used for transactions initiated by 
external masters. 


AT1 12.5 





























IP_B[O—1] Bidirectional | Input Port B 0-1 —The MPC850 senses these inputs; their 
IWP[O—1] values and changes are reported in the PIPR and PSCR of the 
VFLS[0-1] PCMCIA interface. 


Instruction Watchpoint 0-1 —These outputs report the 
detection of an instruction watchpoint in the program flow 
executed by the core. 

Visible History Buffer Flushes Status— The MPC850 outputs 
VFLS[0—1] when program instruction flow tracking is required. 
They report the number of instructions flushed from the history 
buffer in the core. 


D Bidirectional 


Three-state 


Input Port B2—The MPC850 senses this input; its value and 
changes are reported in the PIPR and PSCR of the PCMCIA 
interface. 

\/O Device B is 16 Bits Port Size—The MPC850 monitors this 
input when a PCMCIA interface transaction is initiated to an 
I/O region in socket B in the PCMCIA space. 

Address Type 2—The MPC850 drives AT2 when it initiates a 
transaction on the external bus. If the core initiates the 
transaction, it indicates if the transfer is instruction or data. AT2 
is not used for transactions initiated by external masters. 










A8, C8 
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Table 12-1. Signal Descriptions (Continued) 
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Bidirectional } Input Port B 3—The MPC850 monitors this input; its value and 
changes are reported in the PIPR and PSCR of the PCMCIA 
interface. 

Instruction Watchpoint 2— This output reports the detection of 
an instruction watchpoint in the program flow executed by the 
core. 

Visible Instruction Queue Flush Status— The MPC850 outputs 
VF2 with VFO/VF1 when instruction flow tracking is required. 
VFn reports the number of instructions flushed from the 
instruction queue in the core. 


Bidirectional | Input Port B 4—The MPC850 monitors this input; its value and 
: changes are reported in the PIPR and PSCR of the PCMCIA 

interface. 
Load/Store Watchpoint 0— This output reports the detection of 
a data watchpoint in the program flow executed by the core. 
Visible Instruction Queue Flushes Status—The MPC850 
outputs VFO with VF1/VF2 when instruction flow tracking is 
required. VFn reports the number of instructions flushed from 
the instruction queue in the core. 


Bidirectional | Input Port B 5—The MPC850 monitors this input; its value and: } 
changes are reported in the PIPR and PSCR of the PCMCIA 
interface. 

Load/Store Watchpoint 1— This output sapere the detection of 
a data watchpoint in the program flow executed by the core. 
Visible Instruction Queue Flushes Status— The MPC850 

_ {outputs VF1 with VFO and VF2 when instruction flow tracking is 
required. VFn reports the number of instructions flushed from 
the instruction queue in the core. 


Bidirectional | Input Port B6— The MPC850 senses this input and its value 

Three-state |and changes are reported in the PIPR and PSCR of the | 
PCMCIA interface. See Chapter 16, “PCMCIA Interface.” 
Development Serial Data Input— Data input for the debug port 
interface. See Chapter 36, “System Development and 
Debugging.” 
Address Type 0— The MPC850 drives ATO when it initiates a 
transaction on the external bus. If high (1), the transaction is 
the CPM. If low (0), the transaction initiator is the core. ATO is 
not used for transactions initiated by external masters. 


Bidirectional | Input Port B 7—The MPC850 monitors this input; its value and 
Three-state | changes are reported in the PIPR and PSCR of the PCMCIA 
interface. 
Program Trace—To allow program flow tracking, the MPC850 
asserts this output to indicate an instruction fetch is taking 
place. 
Address Type 3—The MPC850 drives AT3 when it starts a 
transaction on the external bus. When the core initiates a 
transfer, ATS indicates whether it is a reservation for a data 
transfer or a program trace indication for an instruction fetch. 
ATS is not used for transactions initiated by external masters. 
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Table 12-1. Signal Descriptions (Continued) 


OP2 
MODCK1 
STS 


Bidirectional 


Bidirectional 







P16 _| Bidirectional 

Hi-Z R15 _| Bidirectional 
(Optional: 

Open-drain) 

Hi-Z R14 Bidirectional 

R13 Bidirectional 


(Optional: 
Open-drain) 


Bidirectional 
(Optional: 
Open-drain) 


N N 


= 
N 
a 
co 


Bidirectional 


Bidirectional 


Bidirectional 


oO 
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Output Port 2—This output is generated by the MPC850 as a 
result of a write to the PGCRB register in the PCMCIA 
interface. 

Mode Clock 1—Input sampled when PORESET is negated to 
configure PLL/clock mode. 

Special Transfer Start—The MPC850 drives this output to 
indicate the start of an external bus transfer or of an internal 
transaction in show-cycle mode. 


Output Port 3—This output is generated by the MPC850 as a 
result of a write to the PGCRB register in the PCMCIA 
interface. 

Mode Clock 2—This input is sampled at the PORESET 
negation to configure the PLL/clock mode of operation. 
Development Serial Data Output— Output data from the debug 
port interface. 


General-Purpose I/O Port A Bit 15—Bit 15 of the 
general-purpose I/O port A. 
USBRXD— Receive data input for the USB. 


General-Purpose I/O Port A Bit 14—Bit 14 of the 
general-purpose 1/O port A. 
USBOE— Output enable signal for the USB transmitter. 


General-Purpose 1/O Port A Bit 13—Bit 13 of the 
general-purpose I/O port A. 
RXD2— Receive data input for SCC2. 


General-Purpose I/O Port A Bit 12—Bit 12 of the 
general-purpose I/O port A. 
TXD2—Transmit data output for SCC2. 


General-Purpose I/O Port A Bit 9—Bit 9 of the 
general-purpose I/O port A. 

L1TXDA— Transmit data output for the serial interface TDMa. 
SMRXD2—Receive data input for SMC2. 


General-Purpose I/O Port A Bit 8—Bit 8 of the 


| general-purpose I/O port A. 


L1RXDA— Receive data input for the serial interface TDMa. 
SMTXD2—Transmit data output for SMC2. 


General-Purpose I/O Port A Bit 7—Bit 7 of the 
general-purpose I/O port A. 

CLK1—One of four clock inputs that can be used to clock 
SCCs, SMCs, and the USB module. 

TIN1—Timer 1 external clock. 

LiRCLKA—Receive clock for the serial interface TDMa. 
BRGO1 — Output clock of BRG1. 


General-Purpose I/O Port A Bit 6—Bit 6 of the 
general-purpose I/O port A. 

CLK2—One of four clock inputs that can be used to clock 
SCCs, SMCs, and the USB module. CLK2 can also be used 
as a clock source for the BRGs. 

TOUT1—Timer 1 output. 

TIN3— Timer 3 external clock. 
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Table 12-1. Signal Descriptions (Continued) 
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Bidirectional | General-Purpose I/O Port A Bit 5—Bit 5 of the 
general-purpose I/O port A. 

CLK3—One of four clock inputs that can be used to clock 
SCCs, SMCs, and the USB module. 

TIN2—Timer 2 external clock input. 

L1TCLKA— Transmit clock for the serial interface TDMa. 
BRGO2— Output clock of BRG2. 


























Bidirectional {General-Purpose I/O Port A Bit 4—Bit 4 of the 
general-purpose I/O port A. 

CLK4—One of four clock inputs that can be used to clock 
SCCs, SMCs, and the USB module. CLK4 can also be used 
as a clock source for the BRGs. | 
TOUT2—Timer 2 output. 


TIN4— Timer 4 external clock. 


Bidirectional 
(Optional: 
Open-drain) 












General-Purpose I/O Port B Bit 31—Bit 31 of the 
general-purpose I/O port B. 
SPISEL—SPI slave select input. 





Bidirectional 
(Optional: 
Open-drain) 


General-Purpose I/O Port B Bit 30—Bit 30 of the 
general-purpose I/O port B. 

SPICLK— SPI output clock when it is configured as a master 
or SPI input clock when it is configured as a slave. 
TXD3—Transmit data output for SCCS3. 









































Bidirectional 
(Optional: 
Open-drain) 


General-Purpose 1/O Port B Bit 29—Bit 29 of the 
general-purpose I/O port B. 

SPIMOSI—SPI output data when it is configured as a master 
or SPI input data when it is configured as a slave. | 
RXD3— Receive data input for SCCS3. 


Bidirectional 
(Optional: 
Open-drain) 


General-Purpose |/O Port B Bit 28—Bit 28 of the 
general-purpose I/O port B. 

SPIMISO— SPI input data when the MPC850 is a master; SPI 
output data when it is a slave. 

BRGO3—BRG3 output clock. 






















Bidirectional 
_ (Optional: 
Open-drain) 


General-Purpose I/O Port B Bit 27—Bit 27 of the 
general-purpose |/O port B. 

l2CSDA—I°C serial data pin. Bidirectional; should be 
configured as an open-drain output. 

BRGO1—BRG1 output clock. 












Bidirectional 
(Optional: 
Open-drain) 


General-Purpose 1/O Port B Bit 26—Bit 26 of the 
general-purpose |/O port B. 

l2CSCL—I°C serial clock pin. Bidirectional; should be 
configured as an open-drain output. 
BRGO2—BRG2 output clock. 
















| Bidirectional 
(Optional: 
Open-drain) 


General-Purpose I/O Port B Bit 25—Bit 25 of the 
general-purpose I/O port B. 

SMTXD1—SMC1 transmit data output. 
TXD3— Transmit data output for SCC3. 
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Table 12-1. Signal Descriptions (Continued) 


ne Tron noe [wee [ewes 


PB[19] 
L1ST1 


PB[17] 
L1ST3 


MOTOROLA 


Bidirectional 
(Optional: 
Open-drain) 


Bidirectional 
(Optional: 
Open-drain) 


Bidirectional 
(Optional: 
Open-drain) 


Bidirectional 
(Optional: 
Open-drain) 


Bidirectional 
(Optional: 
Open-drain) 


Bidirectional 


(Optional: 
Open-drain) 


Bidirectional 
(Optional: 
Open-drain) 


Bidirectional 


Bidirectional 


Bidirectional 


General-Purpose I/O Port B Bit 24—Bit 24 of the 
general-purpose 1/O port B. 

SMRXD1—SMC1 receive data input. 
RXD3—Receive data input for SCC3. 


General-Purpose I/O Port B Bit 23—Bit 23 of the 
general-purpose 1/O port B. 

SMSYN1—SMC1 external sync input. 

SDACK1—SDMA acknowledge 1 output that is used as a 
peripheral interface signal for IDMA emulation. 


General-Purpose 1/O Port B Bit 22—Bit 22 of the 
general-purpose 1/O port B. 

SMSYN2—SMC2 external sync input. 

SDACK2—SDMA acknowledge 2 output that is used as a 
peripheral interface signal for IDMA emulation. 


General-Purpose I/O Port B Bit 19—Bit 19 of the 
general-purpose I/O port B. 

L1ST1—One of eight output strobes that can be generated by 
the serial interface. 


General-Purpose !/O Port B Bit 18—Bit 18 of the 
general-purpose 1/O port B. 

RTS2—Request to send modem line for SCC2. 

L1iST2—One of eight output strobes that can be generated by 
the serial interface. 


General-Purpose I/O Port B Bit 17—Bit 17 of the 
general-purpose I/O port B. 

L1ST3—One of eight output strobes that can be generated by 
the serial interface. 


General-Purpose I/O Port B Bit 16—Bit 16 of the 
general-purpose I/O port B. 

L1RQa—D-channel request signal for serial interface TDMa. 
LiST4—One of eight output strobes that can be generated by 
the serial interface. 


General-Purpose I/O Port C Bit 15—Bit 15 of the 
general-purpose I/O port C. 

DREQO—IDMA channel 0 request input. 

LiST5—One of eight output strobes that can be generated by 
the serial interface. 


General-Purpose I/O Port C Bit 14—Bit 14 of the 
general-purpose I/O port C. 

DREQ1—IDMA channel 1 request input. 

RTS2— Request to send modem line for SCC2. 

LiST6—One of eight output strobes that can be generated by 
the serial interface. 


General-Purpose I/O Port C Bit 13—Bit 13 of the 
general-purpose I/O port C. 

LiST7—One of eight output strobes that can be generated by 
the serial interface. 

RTS3— Request to send modem line for SCC3. 





Chapter 12. External Signals 12-15 


Part IV. The Hardware Interface 


Table 12-1. Signal Descriptions seonnnued) 
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Bidirectional General- -Purpose I/O Port C Bit 12—Bit 12 of the 
general-purpose 1/O port C. 
L1RQa—D-channel request signal for serial interface TDMa. 
L1ST8—One of eight output strobes that can be generated by 
the serial interface. 


PC[11] Hi-Z R10 Bidirectional | General-Purpose I/O Port C Bit 11—Bit 11 of the 
USBRXP general-purpose I/O port C. 
USBRXP—The USB uses this signal together with USBRXN 
to detect a single-ended zero and the USB’s interconnection 
speed. 
, 


Bidirectional | General-Purpose I/O Port C Bit 10—Bit 10 of the 
general-purpose I/O port C. 
TGATE1—Timer iAimer 2 gate signal. 
USBRXN—The USB uses this signal together with USBRXP 
to detect a single-ended zero and the USB’s interconnection 
speed. 








Bidirectional | General-Purpose I/O Port C Bit 9—Bit 9 of the 
general-purpose I/O port C. 
CTS2—Clear to send modem line for SCC2. 


Bidirectional | General-Purpose I/O Port C Bit 8—Bit 8 of the 
| general-purpose I/O port C. 
-|CD2—Carrier detect modem line for SCC2. 
TGATE1—Timer 1/timer 2 gate signal. 


— 
oOo 


Bidirectional | General-Purpose !/O Port C Bit 7—Bit 7 of the 
general-purpose I/O port C. 
USBTXP— Used with USBTXN as a transmit output of the 
USB. 


Bidirectional | General-Purpose I/O Port C Bit 6—Bit 6 of the 
general-purpose 1/O port C. 
USBTXN—Used with USBTXP as a transmit output of the 
USB. 


PC[6] Hi-Z 
USBTXN 


PC[5] 
CTS3 
LITSYNCA 
SDACK1 


Bidirectional }General-Purpose I/O Port C Bit 5—Bit 5 of the 
general-purpose I/O port C. 
CTS3—Clear to send modem line for SCC3. 
L1TSYNCA— Transmit sync input for serial interface TDMa. 
SDACK1—SDMA acknowledge 1output that is used as a 
peripheral interface signal for IDMA emulation. 


+ 
i 


PC[4] 
CD3 
LIRSYNCA 


PD[15] Hi-Z 
PD[14] Hi-Z 


Bidirectional | General-Purpose I/O Port C Bit 4—Bit 4 of the 
general-purpose 1/O port C. 
CD3—Carrier detect modem line for SCC3. 
LiRSYNCA—Receive sync input for serial interface TDMa. 





m8) 
& 


Bidirectional | General-Purpose I/O Port D Bit 15—Bit 15 of the 
general-purpose 1/O port D. 


+ 
ié%) 


Bidirectional | General-Purpose I/O Port D Bit 14—Bit 14 of the 
general-purpose |/O port D. 
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Table 12-1. Signal Descriptions (Continued) 


Hi-Z P5 Bidirectional | General-Purpose I/O Port D Bit 13—Bit 13 of the 
general-purpose 1I/O port D. 





Hi-Z R 


ie) 


Bidirectional | General-Purpose I/O Port D Bit 12—Bit 12 of the 
general-purpose I/O port D. 


Hi-Z 


= 
oa 


Bidirectional | General-Purpose I/O Port D Bit 11—Bit 11 of the 
general-purpose 1/O port D. 


= 
N 
nN 


Bidirectional | General-Purpose !/O Port D Bit 10—Bit 10 of the 
general-purpose I/O port D. 


ae 
N 
B 


= 
N 
N —h 


Bidirectional | General-Purpose I/O Port D Bit 9—Bit 9 of the 
general-purpose |/O port D. 


Hi-Z T1 Bidirectional | General-Purpose I/O Port D Bit 8—Bit 8 of the 
general-purpose I/O port D. 


Bidirectional | General-Purpose I/O Port D Bit 7—Bit 7 of the 
general-purpose I/O port D. 





= 
N 
fo 


Bidirectional | General-Purpose 1/O Port D Bit 6—Bit 6 of the 
general-purpose I/O port D. 


Bidirectional | General-Purpose I/O Port D Bit 5—Bit 5 of the 
general-purpose I/O port D. 


= 
N 
ee 
wo 


Bidirectional | General-Purpose I/O Port D Bit 4—Bit 4 of the 
general-purpose I/O port D. 


= 
N 
za 
os 


Bidirectional {|General-purpose I/O Port D Bit 3—Bit 3 of the 
general-purpose I/O port D. 


Provides clock to scan chain logic or for the development port 
logic. 
ow Controls the scan chain test mode operations. 


Pulled R11 Input Input serial data for either the scan chain logic or the 
up development port and determines the operating mode of the 
development port at reset. 
Output Output serial data for either the scan chain logic or for the 
development port. 
Test reset for the JTAG scan chain logic. 
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Table 12-1. Signal Descriptions (Continued) 
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Power Supply See Power VDDL—Power supply of the internal logic. 

Figure 12-2 VDDH—Power supply of the I/O buffers and certain parts of | 
the clock control. 
VDDSYN—Power supply of the PLL circuitry. | 
KAPWR—Power supply of the internal OSCM, RTC, PIT, DEC, 
and TB. 
VSS—Ground for circuits, except for the PLL circuitry. 
VSSSYN, VSSSYN1 — Ground for the PLL circuitry. 


GND—Ground 
aE a 
T Pulled low if RSTCONF pulled down 


@ High until SPLL locked, then oscillating 


12.2 Active Pull-Up Buffers 


Active pull-up buffers are a special variety of bidirectional three-state buffer with the 



















following properties: 


¢ When enabled as an output and driving low, they behave as a normal output driver 
(that is, the pin is constantly driven low). 


¢ When enabled as an output and driving high, drive high until an internal detection 
circuit determines that the output has reached the logic high threshold and then stop 
driving (that is, the pin switches to high-impedance). 


e When disabled as an output or functioning as an input, it is not driven. 


Due to the behavior of the buffer when being driven high, a pull-up resistor is required 
externally to function as a ‘bus keep’ for these shared signals in periods when no drivers 
are active and to keep the buffer from oscillating when the buffer is driving high, because 
if the voltage ever dips below the logic high threshold while the buffer is enabled as an 
output, the buffer will reactivate. Further, external logic must not attempt to drive these | 
signals low while active pull-up buffers are enabled as outputs, because the buffers will 
reactivate and drive high, resulting in a buffer fight and possible damage to the MPC850, to 
the system, or to both. 


Figure 12-4 compares three-state buffers and active pull-up buffers graphically in general 
terms; it does not, however, imply which edges trigger which events for any particular 
signal. 
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1 Drive high on one edge 


bes Seo ees 2 aoe 2 Switch to Hi-Z on later edge 
Three-state l/ | 3 Pull-up resistor maintains 
buffer | logic high state 
| | 1 Drive high on one edge 
| | 2 Switch to Hi-Z when 
| 


threshold voltage 
3 | 5 (Voh+margin) is reached 


Active Je ere ea <1 genet Drees: Remy ees 
pull-up a tst—S ep Se ee a ee 3 Pull-up resistor maintains 
buffer | | logic high state 
I | | 4 Disable buffer as output 
12 4 5 Pull-up resistor maintains 
logic high state; other 
driver can drive signal 


Note: Events 1 and 4 can be in quick succession. 


Figure 12-4. Three-State Buffers and Active Pull-Up Buffers 


Table 12-2 summarizes when active pull-up drivers are enabled as outputs. 


Table 12-2. Active Pull-Up Resistors Enabled as Outputs 


someon 
TS, BB When the MPC850 is the external bus master throughout the entire bus cycle. 


When the MPC850’s memory controller responds to the access on the external bus, throughout the entire 
bus cycle. 


When the MPC850’s memory controller responds to the access on the external bus, then: 
- For chip selects controlled by a GPCM set for external TA, the MPC850’s TA buffer is not enabled as an 
output. 

- For chip-selects controlled by the GPCM set to terminate in n wait-states, TA is enabled as an output on 
cycle (n-1) and driven high, then is driven low on cycle n, terminating the bus transaction. External logic 
can drive TA at any point before this, thus terminating the cycle early. [For example, assume the GPCM is 
programmed to drive TA after 15 cycles. If external logic drives TA before 14 clocks have elapsed, then 
the TA is accepted by the MPC850 as a cycle termination.] 

- For UPM-controlled chip selects, the TA buffer is enabled as an output throughout the entire bus cycle. 









The purpose of active pull-up buffers is to allow access to zero wait-state logic that drives 
a shared signal on the clock cycle immediately following a cycle in which the signal is 
driven by the MPC850. In other words, it eliminates the need for a bus turn-around cycle. 


12.3 Internal Pull-Up and Pull-Down Resistors 


The TMS, TRST, and TDI/DSDI pins have internal pull-up resistors. TDI/DSDI should be 
pulled up to VCC to keep it from oscillating when unused. 
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If RSTCONF is pulled down, during hardware reset (initiated by HRESET or PORESET), 
the data bus D[O—31] is pulled down with internal pull-down resistors. These internal 
pull-down resistors are to provide a logic-zero default for these pins when programming the 
hard reset configuration word (See Section 11.3.1.1, “Hard Reset Configuration Word.”). 
These internal pull-down resistors are disconnected after HRESET is negated. 


No other pins have internal pull-ups or pull-downs. 


Resistance values for internal pull-up and pull-down resistors are not specified because 
their values may vary due to process variations and shrinks in die size, and they are not 
tested. Typical values are on the order of 5 KQ but can vary by approximately a factor of 2. 


12.4 Recommended Basic Pin Connections 


The following sections provided recommended pin connections. 


12.4.1 Reset Configuration 


Some external pin configuration is determined at reset by the hard reset configuration word. 
Thus, some decisions as to system configuration (for example, location of BDM pins) 
should be made before required application of pull-up and pull-down resistors can be 
determined. 


RSTCONF should be grounded if the hard reset configuration word is used to configure the 
MPC850 or should be connected to VCC if the default configuration is used. 


Pull-up resistors may not be used on D[O—31] to set the hard reset configuration word, as 
the values of the internal pull-down resistors are not specified or guaranteed. To change a 
data bus signal from its default logic low state during reset, actively drive that signal high. 


MODCK[1-—2] must be used to determine the default clocking mode for the MPC850. After 
power-on reset, the MODCK[1-—2] pins change function and become outputs. Thus, if these 
alternate functions are also desired, then the MODCK[1-—2] configuration should be set 
with three-state drivers that turn off after PORESET is negated; however, if MODCK[1-2] 
pins’ alternate output functions are not used in the system, they can be configured with 
pull-up and pull-down resistors. 


12.4.1.1 Bus Control Signals and Interrupts 


Signals with open-drain buffers and active pull-up buffers (HRESET, SRESET, TEA, TS, 
TA, BI, and BB) must have external pull-up resistors. | | 


Some other input signals do not absolutely require a pull-up resistor, as they may be 
actively driven by external logic. However, if they are not used externally, or if the external 
logic connected to them is not always actively driving, they may need external pull-up 
resistors to hold them negated. 
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These signals include the following: 


e PORESET 

¢ UPWAITA/GPL_A4/AS (if configured as AS or UPWAITA) 

¢ KR/RETRY/IRQ4/SPKROUT (if configured as KR/RETRY or IRQ4) 
e Any IRQx (if configured as IROx) 

¢ BR Gf the MPC850’s internal bus arbiter is used) 

¢ BG (if an external bus arbiter is used) 


12.4.2 JTAG and Debug Ports 


Recommendations on configuration of the JTAG pins (including TMS, TRST, TDI, TDO, 
and TCK) are made in Section 37.6, “Recommended TAP Configuration.” See also 
Section 11.4, “TRST and Power Mode Considerations.” 


TCK/DSCK or ALE_B/DSCK/AT1 (depending on the configuration of the DSCK 
function) should be connected to ground through a pull-down resistor to disable Debug 
Mode as a default. When required, a debug mode controller tool externally drives this signal 
high actively to put the MPC850 into debug mode. 


Note that TDI/DSDI should be pulled up to VCC to keep it from oscillating when unused. 


12.4.3 Unused Inputs 


In general, pull-up resistors should be used on any unused inputs to keep them from 
oscillating. For example, if PCMCIA is not used, the PCMCIA input pins (WAIT_B, 
IP_B[0-—8]) should have external pull-up resistors. However, unused pins of port A, B, C, 
or D can be configured as outputs, and, if they are configured as outputs they do not require 
external terminations. 


12.4.4 Unused Outputs 


Unused outputs can be left unterminated. 


12.5 Signal States during Hardware Reset 


During hardware reset (HRESET or PORESET), the signals of the MPC850 behave as 
follows: 

e The bus signals are high-impedance. 

e The port I/O signals are configured as inputs, and are therefore high-impedance. 

e The memory controller signals are driven to their inactive state. 


However, some signal functions are determined by the reset configuration. When HRESET 
is asserted, these signals immediately begin functioning as determined by the reset 
configuration and are either high-impedance or are driven to their inactive state 
accordingly. The behavior of these signals is shown in Table 12-3. 
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Table 12-3. Signal States during Hardware Reset 


RETRY/IRQ4/SPKROUT 
FRZ/IRQ6 
ALE_B/DSCK/AT1 


IP_B[O—1]/IWP[0-1)/VFLS[0-1] 
IP_B3/IWP2/VF2 


_ IP_B4/LWPO/VFO 


IP_B5/LWP1/VF1 
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BDIP: high impedance 
GPL_B5: high 


IRQ2: high impedance 


KR/RETRY/RQ4: high impedance 
SPKROUT: low | 


IRQ6: high impedance 


ALE_B: low | | 
DSCK/AT1: high impedance | 


IP_B[O—1]: high impedance. 
IWP[O—1]: high 
VFLS[0—1]: low 


IP_B3: high impedance 
IWP2: high 
VF2: low 


IP_B4: high impedance 
LWPO: high 
VFO: low 


{P_B5: high impedance 
LWP1: high; 
VF 1: low 
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Chapter 13 
External Bus Interface 


The MPC850 bus is a synchronous, burstable bus that can support multiple masters. Signals 
driven on this bus are required to make the setup and hold time relative to the bus clock’s 
rising edge. The MPC850 architecture supports byte, half-word, and word operands 
allowing access to 8-, 16-, and 32-bit data ports through the use of synchronous cycles 
controlled by the size outputs (TSIZ0, TSIZ1). Access to 16- and 8-bit ports is done for 
slaves controlled by the memory controller. 





13.1 Features 
The MPC850 bus interface features are listed as follows: 


e 26-bit address bus with transfer size indication 
e 32-bit data bus 


e Dynamic bus sizing to 32-, 16-, or 8-bit ports accessed through the memory 
controller 


e TTL-compatible interface 
e Bus arbitration supported optionally by internal or external logic 


e Bus arbitration logic on-chip supports an external master with programmable 
priority 


¢ Compatible with PowerPC architecture 
e Easy to interface to slave devices 
e Bus is synchronous (all signals are referenced to rising edge of bus clock) 


e Contains support for data parity 


13.2 Bus Transfer Overview 


The bus transfers information between the MPC850 and external memory or a peripheral 
device. External devices can accept or provide 8, 16, and 32 bits in parallel and must follow 
the handshake protocol described in this section. The maximum number of bits accepted or 
provided during a bus transfer is defined as port width. 
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The MPC850’s address bus specifies the address for the transfer and its data bus transfers 
the data. Control signals indicate the beginning of the cycle and the type of cycle, as well 
as the address space and size of the transfer. The selected device controls cycle length with 
signal(s) used to terminate the cycle. A strobe signal for the address bus indicates the 
validity of the address and gives data timing information. The MPC850 bus is synchronous, 
therefore, the bus and control input signals must be timed to setup and hold times relative 
to the rising edge of the clock. At minimum, single-beat bus cycles can be completed in two 
clock cycles. 


Furthermore, for all inputs, the MPC850 latches the input’s level during a sample window, 
shown in Figure 13-1, around the rising clock edge. To ensure that an input signal is 
recognized on a specific rising clock edge, that input must be stable during the sample 
window. If an input changes during the window, the level recognized by the MPC850 is 
unpredictable; however, the MPC850 always resolves the latched level to either a logical 
high or low before using it. For deterministic operation, all input signals must obey the 
protocols described in this chapter in addition to meeting input setup and hold times. 


Input Hold Time ——->| |< 


Input Setup Time ——-> 








Clock 





Window 





Figure 13-1. Input Sample Window 


TSIZO and TSIZ1 indicate the number of bytes remaining to be transferred during an 
operand cycle (consisting of one or more bus cycles) and are driven with the address type 
signals at the beginning of a bus cycle. These signals are valid at the rising edge of the clock 
in which the transfer start signal (TS) is asserted. 


13.3 Bus Interface Signal Descriptions 
Figure 13-2 shows the bus signals for the MPC850. 
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Figure 13-2. MPC850 Bus Signals 


Table 13-1 describes each signal; detailed descriptions can be found in subsequent 
sections. 


Table 13-1. MPC850 Signal Overview 


[sare [rvs[icmefvo] mn 
Address and Transfer Attributes 


A[6-31] High Driven by the MPC850 when it owns the external bus. Specifies the physical 
Address Bus address of the bus transaction. Can change during a transaction when controlled 
by the memory controller. 


Sampled by the MPC850 when an external device initiates a transaction and the 
memory controller was configured to handle external master accesses. 
RD/WR 1 High Driven by the MPC850 along with the address when it owns the external bus. 
Read/Write Driven high indicates that a read access is in progress. Driven low indicates that a 
write access is in progress. 
Sampled by the MPC850 when an external device initiates a transaction and the 
memory controller was configured to handle external master accesses. 
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Table 13-1. MPC850 Signal Overview (Continued) 
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Driven by the MPC850 along with the address when it owns the external bus. 
Driven low indicates that a burst transfer is in progress. Driven high indicates that 
the current transfer is not a burst. 


Specifies the data transfer size for the transaction. 

Sampled by the MPC850 when an external device initiates a transaction and the 
memory controller was configured to handle external master accesses. 

Driven by the MPC850 along with the address when it owns the external bus. 
Indicates additional information about the address on the current transaction. 


Driven by the MPC850 along with the address when it owns the external bus. 
Indicates additional information about the address on the current transaction. 


















TSIZ{O—1] 
Transfer Size 










Driven by the MPC850 along with the address when it owns the external bus. 
‘Indicates additional information about the address on the current transaction. 


















| Driven by the MPC850 when it owns the external bus as part of the burst protocol. 
Asserted indicates that the second beat in front of the current one is requested by 
the master. Negated before the burst transfer ends to abort the burst data phase. 


Transfer Stari 







Driven by the MPC850 when it owns the external bus. Indicates the start of a 
transaction on the external bus or signals the beginning of an internal transaction 
in. show cycle mode. 






Special 
Transfer Start 












Reservation Protocol 










If the core initiates a bus cycle by executing a stwex. to a nonlocal bus on which 
the memory reservation is lost, the nonlocal bus uses this signal to back-off the 
cycle. See Section 13.4.9, “Memory Reservation.” 

For regular transactions, the slave device drives this signal to indicate that the 
MPC850 must relinquish the bus and retry the cycle. 


KR/RETRY 
Kill 

Reservation/ 
Retry 
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Table 13-1. MPC850 Signal Overview (Continued) 


Se 


The data bus has the following byte lane assignments: 

















Data Byte Byte Lane 
D[0-7] 0 

D[8—15] 1 
D[16—23] 


D[24-31] 





Driven by the MPC850 when it is external bus master and it initiated a write 
transaction to a slave device. For single-beat transactions, the byte lanes not 
selected for the transfer by the A[30—31] and TSIZ[0—1] will not supply valid data. 


Driven by the slave in a read transaction. For single-beat transactions, the byte 
lanes not selected for the transfer by the A[30—31] and TSIZ[0—1] will not be 
sampled by the MPC850 









Each parity line corresponds to each one of the data bus lanes: 
Data Bus Byte Parity Line 










D[0-7] DPO 
D[8—15] DP1 
D[16-23] DP2 


D[24-31] —S—SsiDP3 






















Driven by the MPC850 when it is external bus master and it initiated a write 
transaction to a slave device. Each line has the parity value (even or odd) of its 

corresponding data bus byte. For single-beat transfers, byte lanes not selected by 
A[30—31] and TSIZ[O—1] will not have a valid parity line. 





Driven by the slave in a read transaction. Each parity line is sampled by the 
MPC850 and checked (if enabled) against the expected value parity value (even 
or odd) of its corresponding data bus byte. For single-beat transfers, byte lanes 

not selected by A[30—31] and TSIZ[O—1] are not sampled by the MPC850 and its 
parity lines will not be checked. 






Driven by the slave device to which the current transaction is addressed. 
Indicates that the slave received the data on the write cycle or returned data on 
the read cycle. If the transaction is a burst, TA should be asserted for each beat. 


Driven by the MPC850 when the slave device is controlled by the on-chip memory 
controller or PCMCIA interface. : 









Transfer Error 
Acknowledge 


Driven by the slave device to which the current transaction is addressed. 

Indicates that an error condition occurred during the bus cycle. 

Driven by the MPC850 when the internal bus monitor detects a bus error. 

1 Low Driven by the slave device to which the current transaction was addressed. 
Indicates that the current slave does not support burst mode. 


Driven by the MPC850 when the on-chip memory controller controls the slave. 












BI 
Burst Inhibit 
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Table 13-1. MPC850 Signal Overview (Continued) 


ao [rele] tn 


Arbitration 
BR 1 Low 
Bus Request 


BG 1 Low 
Bus Grant 
BB 1 Low 
Bus Busy 


O 
| 














Asserting BR when the internal arbiter is enabled indicates that an external 
master is requesting the bus. 












The MPC850 drives BR when the internal arbiter is disabled. 





When the internal arbiter is enabled, the MPC850 asserts BG to indicate that an 
external master may assume bus mastership and begin a bus transaction. The 
device requesting bus mastership should qualify BG to ensure it is the bus owner: 
Qualified BG = BG & ~ BB 







When the internal arbiter is disabled, BG is sampled and properly qualified by the 
MPC850 when an external bus transaction is to be executed by the chip. 






When the internal arbiter is enabled, the MPC850 asserts BB to indicate it is bus 
master. When the internal arbiter is disabled, the MPC850 asserts BB after the 
external arbiter granted mastership to the chip and it is ready to start the transfer. 











When the internal arbiter is enabled, the MPC850 samples this signal to get 
indication of when the external master ended its bus tenure (BB negated). 

When the internal arbiter is disabled, the BB is sampled, to properly qualify the 
BG line, when an external bus transaction is to be executed by the chip. 







= Output from the MPC850 
= Input to the MPC850 


13.4 Bus Operations 


This section provides a functional description of the system bus, the signals that control it, 
and the bus cycles provided for data transfers. It also describes error conditions, bus 
arbitration, and the reset operation. The MPC850 generates a system clock output 
(CLKOUT), which directly sets the bus interface operation frequency. Internally, the 
MPC850 uses a phase-lock loop (PLL) circuit to generate a master clock for all core 
circuitry (including the bus interface), which is phase-locked to CLKOUT. 


MPC850 bus interface signals are specified with respect to the rising edge of the external 
CLKOUT and are guaranteed to be sampled as inputs or changed as outputs with respect to 
that edge. Because the same clock edge is used for driving or sampling bus signals, clock 
skew may occur between various modules in a system due to routing or the use of multiple 
clock lines. The system must handle any clock skew problems that could occur as a result 
of layout, lead length, and physical routing. 


13.4.1 Basic Transfer Protocol 


The basic transfer protocol defines the sequence of actions required for a complete 
MPC850 bus transaction. Figure 13-3 shows a simplification of the basic transfer protocol. 


Arbitration Address transfer Data transfer 


Figure 13-3. Basic Transfer Protocol 





13-6 MPC8&50 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part IV. The Hardware Interface 


e Arbitration—A device requests bus access 
e Address phase —The address and the transfer attributes are generated. 


e Data phase— Any data to be transferred is transferred. The data phase may transfer 
a single beat of data (4 bytes or less) for nonburst operations, a 4-beat data burst (4 
x 4 bytes), an 8-beat data burst (8 x 2 bytes), or a 16-beat data burst (16 x 1 bytes). 


e Termination—The transfer completes successfully or it was aborted. 


13.4.2 Single-Beat Transfer 


During the data transfer, the master writes data to the slave or reads data from the slave. On 
a write cycle, the master drives the data as soon as it can, but not before the cycle after the 
address transfer phase. The master must consider the one dead clock cycle switching 
between drivers to avoid electrical contention. The master can stop driving the data bus as 
soon as it samples TA asserted on the rising edge of CLKOUT. On a read cycle the master 
accepts the data bus contents as valid at the rising edge of CLKOUT in which TA is sampled 
asserted. 


13.4.2.1 Single-Beat Read Flow 


The basic read cycle begins with a bus arbitration, followed by the address transfer, then the 
data transfer. The following flow and timing diagrams show the handshakes applicable to 
the fixed transaction protocol. 


MASTER SLAVE 


Bus Request (BR) 


Receives Bus Grant (BG) from arbiter 


Asserts Bus Busy (BB) if no other master is driving 


Asserts Transfer Start (TS) 
Drives address and attributes 


| 





’ 


Receives Address 


Returns data 


—_— 


Asserts Transfer Acknowledge (TA) 


| 





Y 


Receives data 


Figure 13-4. Basic Flow Diagram of a Single-Beat Read Cycle 
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CLKOUT | | | | | | | | | | | | | 


| | | | | | | 


BR | | | | | | | 

) Receive BG and BB negated : | | 

en | ; | | : | | | 

BG | yy, i | | | | 
| ey, 

an > Assert BB, drive address andassertTS | 

BB | bee | | | | 

Uy, | | I 

| | 


| | | 


z= 
| 

Go 

—_ 


TSIZ[O-1], AT[O-3] 





Data is Valid 


Figure 13-5. Basic Timing: Single-Beat Read Cycle, Zero Wait States 
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CLKOUT | | | | | | | | | | | | | 















Wait State 






Data is Valid 


Figure 13-6. Basic Timing: Single-Beat Read Cycle, One Wait State 
13.4.2.2 Single-Beat Write Flow 


The basic write cycle begins with a bus arbitration, followed by the address transfer, then 
the data transfer. The following flow and timing diagrams show the handshakes as 
applicable to the fixed transaction protocol. 
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MASTER SLAVE 


' 


Bus Request (BR) 


Y 


Receives Bus Grant (BG) from arbiter 


cy 


Asserts Bus Busy (BB) if no other master is driving 
Asserts Transfer Start (TS) 
Drives address and attributes 


t 


Drives data 


P ; 
Asserts Transfer Acknowledge (TA) 














roY 


Interrupts data driving 


Figure 13-7. Basic Flow of a Single-Beat Write Cycle 
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CLKOUT | | | | | | | | | | | | | 


BR | | \ | | 





























| 
| 

TSIZ(0-1], ATIO-3} | See 
| 














\ \ 














~~ Data is sampled 


Figure 13-8. Basic Timing: Single-Beat Write Cycle, Zero Wait States 
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CLKOUT | | | | | | | | | | | | | | 


| | I | i | 


BR | | | | | | 
7 Receive BG and BB negated | | 

oe | | | | | 

BG | By, | | | | 
| Ne BY 

a ane > Assert BB, drive address andassertTS 

BB { | | | 


| | | | 


> 
a 
J 
a 
—. 


— 
” 
N 
i 
ES 
T 
& 


Wait State 


Data is Sampled 







Figure 13-9. Basic Timing: Single-Beat Write Cycle, One Wait State 


The general case of single-beat transfers assumes that external memory has a 32-bit port 
size. The MPC850 provides an effective mechanism for interfacing with 16- and 8-bit port 
size memories by allowing transfers to these devices when they are controlled by the 
internal memory controller. 
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CLKOUT | | | | | | | | | | | | | 












































Figure 13-10. Basic Timing: Single-Beat, 32-Bit Data Write Cycle, 16-Bit Port Size 


13.4.3 Burst Transfers 


The MPC850 or other synchronous external bus devices use burst transfers to access 
16-byte operands. A burst accesses a 16-byte block aligned to a 16-byte memory boundary 
by supplying a starting address that points to one of the words and requiring the memory 
device to sequentially drive/sample each word on the data bus. The selected slave device 
must internally increment A28 and A29 (and A30 in the case of a 16-bit port size slave 
device) of the supplied address for each transfer, causing the address to wrap around at the 
end of the four-word block. For slaves controlled by the memory controller, the MPC850 
increments the address on A[28—31]. 


Address and transfer attributes supplied by thebus master remain stable during the 
transfers; the selected device terminates each transfer by asserting TA after each word 
transferred on the data bus. The MPC850 also supports burst-inhibited transfers for slave 
devices that do not support bursting. For this type of cycle, the selected slave device 
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supplies/samples the address of the first word of the burst and asserts the burst-inhibit signal 
(BI) with TA for the first transfer of the burst access. The MPC850 responds by terminating 
the burst and accessing the rest of the 16-byte block, using three read/write cycles (each one 
for a word) for a 32-bit port-width slave, seven read/write cycles for a 16-bit port-width 
Slave, or fifteen read/write cycles for a 8-bit port-width slave. 


The general case of burst transfers assumes that external memory has a 32-bit port size. The 
MPC850 provides an effective mechanism for interfacing with 16-bit port size memories 
and 8-bit port size memories allowing burst transfers to these devices when they are 
controlled by the internal memory controller. In this case, the MPC850 attempts to initiate 
a burst transfer as in the normal case. If, in a cycle before the TA is asserted for the first 
beat, the memory controller responds that the port size is 16-/8-bits and that the burst is 
accepted, the MPC850 completes a 8-/16-beat burst. Each data beat effectively transfers 
only 2/1 bytes. Note that this 8-/16-beat burst is considered an atomic transaction, so the 
MPC850 will not allow other unrelated master accesses or bus arbitration between 
transfers. 


13.4.4 Burst Operations 


The MPC850 burst mechanism uses additional signals to the basic protocol: BURST 
indicates that the cycle is a burst cycle, burst data in progress (BDIP) indicates the duration 
of the burst data, and burst inhibit (BI) indicates whether the slave supports bursts. Along 
with asserting TS, the master drives the address, address attributes, and BURST signals to 
indicate that a burst transfer is being initiated. Slaves that support bursting negate BI. If the 
slave cannot burst, it asserts BI. During the data phase of a burst write cycle the master 
drives the data. The master also asserts BDIP if it intends to drive the data beat after the 
current one. 











When the slave has received the data, it asserts TA to indicate to the master that it is ready 
for the next transfer. The master again drives the next data and asserts or negates BDIP. If 
the master does not intend to drive another data beat, it negates BDIP to indicate to the slave 
that the next data beat is the last one in the burst write. 





Bursts performed by MPC850 internal masters are always 16 bytes. The MPC850 memory 
controller responds only to fixed-length bursts (also typically programmed to be 16 bytes). 
Therefore, devices in an MPC850 system should attempt only 16-byte burst transfers 
except for external masters with a dedicated chip select, such as an external MPC603 that 
bursts to a chip select programmed for a 32-byte burst. 


During the data phase of a burst read cycle, the master receives data from the addressed 
slave. If the master needs more than one data, it asserts BDIP. When the master receives the 
next-to-last data, it negates BDIP. Thus, the slave stops driving new data after receiving the 
negation of BDIP at the rising clock edge. 











In the case of 32-bit port size, the burst includes 4 beats. When the port size is 16 bits and 
controlled by the internal memory controller, the burst includes 8 beats. When the port size 
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is 8 bits and controlled by the internal memory controller, the burst includes 16 beats. The 
MPC850 bus supports critical data first access for fixed-size burst. The order of wraparound 
wraps back to the critical data. For example, assuming data 2 is critical: 
e Case burst of four: 
data 2 —> data 3 —> data 0 — data 1 
e Case burst of eight: 
data 2 — data 3 — data4 — ......... —> data 7 — data 0 — data 1 


The following flow and timing diagrams show the handshakes for burst transactions. 
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MASTER : SLAVE 


Y 


Bus Request (BR) 


Receives Bus Grant (BG) from arbiter 


y 


Asserts Bus Busy (BB) if no other master is driving 


Asserts Transfer Start (TS) 
Drives address and attributes 













Drives BURST asserted 
Asserts Burst Data in Progress (BDIP) Receives address 
Returns data [ee 
Asserts Transfer Acknowledge (TA) 
v 
Receives data 
BDIP asserted 
? y 
| Yes Don't drive 
data 
Returns data a 
Asserts Transfer Acknowledge (TA) 
| 
Receives data No 
DIP asserted 
? 
Yes Don’t drive 
data 
Returns data _ 
Asserts Transfer Acknowledge (TA) 
v 
Receives Data 


No 


ed 


IP asserted 
? 


Y 


Negates Burst Data in Progress (BDIP) 





Yes Don't drive 
data 








Returns data a2 
Asserts Transfer Acknowledge (TA) 


BDIP asserted 
? 


Receives data 


Don’t drive 
data 


Figure 13-11. Basic Flow of a Burst-Read Cycie 
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CLKOUT 


BB 


A(6-31], AT[O-3] 


R/W 


TSIZ{O-1] 


PS 
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=e os 


| 
| 
| 
| 
| 
L 
| 
| 
| 








Last Beat 





Expects Another Data 









| Datais | Datais | Datais | Datais | 


| ae | Valid | Valid | Valid | Valid | 


| | 
\ | | | 
| | 

| 


Figure 13-12. Burst-Read Cycle: 32-Bit Port Size, Zero Wait State 
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CLKOUT | | | | | | | | | | | | | | | | 
BR i / | | | 
| 


= 
| | | | | | 
ae oe ee ee a ee eee: 
| | | | | 
| | { | | 
Al6-31], AT[O-3] 
| | | | 
| i le | 
AAT ] | | \ 
RW | ) | | | 
| | | | 
1c i (nD. 





























| Wait State 


Figure 13-13. Burst-Read Cycle: 32-Bit Port Size, One Wait State 
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| | | | | | 

—— | | | | | | 
BB | \ | | | | | 
| | | | | 

\ ! | | 


| 
| 
nea 
| 


R/W 


TSIZ{O-1] 





| | 
I 





Data is 


| | 

| | 

on) Valid Valid Valid ; > Valid 
| | | | | 

| | | | 


Datais 





| 
<—_______@» 


Wait State | 








Datais \ . Datais 





Figure 13-14. Burst-Read Cycle: 32-Bit Port Size, Wait States between Beats 
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CLKOUT 


A(6-31], AT[O-3] 





13 





Figure 13-15. Burst-Read Cycle: 16-Bit Port Size, One Wait State between Beats 
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MASTER SLAVE 


Y 


Bus Request (BR) 


Y 


Receives Bus Grant (BG) from arbiter 


Asserts Bus Busy (BB) if no other master is driving 


Asserts Transfer Start (TS) 
Drives address and attributes 








Drives BURST asserted 
Drives data Receives address 


Asserts burst data in progress (BDIP) 





Asserts Transfer Acknowledge (TA) 






















v 
Drives data 
BDIP asserted 
? 
7 Don’t sample 
next data 
Asserts Transfer Acknowledge (TA) 
Y 
Drives data 
DIP asserted NS 
? 
Pal Yes Don’t sample 
y next data 
Asserts Transfer Acknowledge (TA) 
fe ieg tes we ge. pote ra Sart a = = ay a py 1 
\/ Y 
Drives data 






BDIP asserted 
? 





No 






Y 


Negates Burst Data in Progress (BDIP) 


nm 






Yes Don’t sample 
next data 





Asserts Transfer Acknowledge (TA) 





BDIP asserted 
? 


No 





Stops driving data 







Don’t sample 
next data 


Figure 13-16. Basic Flow of a Burst Write Cycle 
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CLKOUT | | | | | | | | | | | | | | | 














TS | | \ / | | I | 
| ! | | | 


| 
| Last beat | 
| 
| 











Will drive another data 














Data is Data is Data is 
sampled sampled sampled sampled 


Figure 13-17. Burst-Write Cycle: 32-Bit Port Size, Zero Wait States 


Figure 13-18 shows an attempted burst read to a slave device that does not support bursting. 
The slave acknowledges the first transfer and also asserts the burst-inhibit signal (BI). The 
MPC850 responds by terminating the burst and accessing the rest of the 16-byte block, 
using three single-beat read cycles. 
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A(6-27] 
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| 
BURST \ / | | : 


| | | | | 












































Figure 13-18. Burst-Inhibit Cycle: 32-Bit Port Size 


13.4.5 Alignment and Data Packing on Transfers 
The MPC850 external bus supports only natural address alignment: 


e Byte access can have any address alignment. 
e Half-word access must have A[31] = O0b0. 

e Word access must have A[30—31] = Ob00. 

e For burst accesses A[30—31] = Ob00. 


Misaligned accesses performed by the core are broken into multiple bus accesses with 
natural alignment. Misaligned accesses performed by external masters are not supported. 
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The MPC850 transfers operands through its 32-bit data port. If the transfer is controlled by 
the internal memory controller, the MPC850 can support 8- and 16-bit data port sizes. The 
bus requires that the portion of the data bus used for a transfer to or from a particular port 
size be fixed. A 32-bit port must reside on D[O—31], a 16-bit port must reside on D[O-15], 
and an 8-bit port must reside on D[O—7]. The MPC850 always tries to transfer the maximum 
amount of data on all bus cycles; for a word operation, it always assumes that the port is 32 
bits wide when beginning the cycle. Figure 13-19, Figure 13-20, Table 13-2, and 
Table 13-3 use the following conventions: 


¢ OPO is the MSB of a word operand; OP3 is the LSB. 


e The two bytes of a half-word operand are OPO (most-significant) and OP1 or OP2 
(most-significant) and OP3, depending on the address of the access. 


¢ The single byte of a byte-length operand is OPO, OP1, OP2, or OP3, depending on 
the address of the access. 


31 


0 


OP1 


ore a 


OP3 


Figure 13-19. Internal Operand Representation 


| Figure 13-20 shows the device connections on the data bus. 


Interface Output 
Register 


32-Bit Port Size 





Figure 13-20. Interface to Different Port Size Devices 
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Table 13-2 lists the bytes required on the data bus for read cycles. 
Table 13-2. Data Bus Requirements for Read Cycles 


32-Bit Port 16-Bit Port 8-Bit Port 
TSIZ[0—1] 
Ast D[O-7] | D[8—15] D[0-7] D[0-—7] 






Transfer 
Size 






1 


= 
Byte 0 1 | 0 | OPO | 
Se 
Exile eee ee 
ees 
, | OPO | OPt 


Half-Word | 1 PO | 
a eee 
Mert 0) Oe 


— denotes a byte not required during that read cycle. 
Table 13-3 lists data transfer patterns for write cycles when the MPC850 initiates accesses. 





Table 13-3. Data Bus Contents for Write Cycles 


Tanstee External Data Bus Pattern 
Sj TSIZ[0-1] 
ize 


D[0-7] D[24-31] 
aii 


_— ae 


wea fe fo 


— denotes a byte not required during that read cycle. 















Address 


0 
Nm 


O 
5 
ro) 
O 
5 
wo 


O 
2 





= ook: — 2 
oO 


OP3 


13.4.6 Arbitration Phase 


The external bus design provides for a single bus master at any one time, either the MPC850 
or an external device. The arbitration of external bus devices contending for bus mastership 
may be handled either by an external central bus arbiter or by the internal on-chip arbiter. 
In the latter case, the system is optimized for one external bus master besides the MPC850. 
The arbitration configuration (external or internal) is set at system reset. See Section 15.8, 
“External Master Support.” 


Each bus master must have bus request (BR), bus grant (BG), and bus busy (BB) signals. A 
device needing the bus asserts BR, and then waits for the arbiter to assert BG. The new 
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master must look at BB to ensure that no other master is driving the bus before it can assert 
BB to assume bus mastership. (Note that the internal arbiter may take away the BG if an 
internal master of higher priority requests the bus and the new master does not assert BB 
within one clock after BG.) 


If the arbiter removes the bus grant from a device that wants another transfer, the device 
must rearbitrate for bus mastership. The MPC850, however, guarantees data coherency for 
accesses to small ports and for decomposed bursts. This means that the MPC850 does not 
release the bus before atomic transactions complete. For example, a halfword transfer to a 
byte port is broken into two byte transfers; the MPC850 does not deassert BB until the 
second transfer completes, unless an error occurs. Figure 13-19 shows basic bus arbitration 
protocol. Section 10.4.2, “SIU Module Configuration Register (SIUMCR),” describes how 
prioritization can be configured. 


Requesting Device Arbiter 





Assert BR 











1. Wait for BB to be negated 
2. Assert BB to become next master 
3. Negate BR 





















oe SR NO RR RRS UR RS ER Noo RNR SER 
Negate BG (or keep it asserted to 
park bus master) 





Figure 13-21. Bus Arbitration Flowchart 


13.4.6.1 Bus Request (BR) 


The potential bus master asserts BR to request bus mastership. BR should be negated as 
soon as the bus is granted, the bus is not busy, and the new master can drive the bus. If 
requests are pending, the master can assert BR as long as needed. When configured for 
external arbitration, the MPC850 drives BR when it requires bus mastership. When the 
internal on-chip arbiter is used, BR is an input to the internal arbiter and should be driven 
by the external bus master. 
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13.4.6.2 Bus Grant (BG) 


The arbiter asserts BG to indicate that the bus is granted to the requesting device. BG can 
be negated after BR is negated or it can remain asserted to park the current master on the 
bus. The internal arbiter may take away the BG if the new master does not assert BB within 
one clock. 


When the internal on-chip arbiter is used, BG is an output from the internal arbiter to the 
external bus master. When configured for external central arbitration, BG is an input to the 
MPC850 from the external arbiter. 


13.4.6.3 Bus Busy (BB) 


BB indicates that the current master is using the bus. New masters should not begin a 
transfer until BB is deasserted. The bus master should not relinquish or negate BB until it 
completes its transfer. To avoid contention on BB, masters should three-state BB when it 
gets a logical 1 value. This situation implies an external pull-up resistor is needed to ensure 
that a master that acquires the bus can recognize the negation of BB, regardless of how 
many cycles have passed since the previous master relinquished the bus. See Figure 13-22. 


External Bus 
Master 


MPC850 


a 








oa 


er ae ——! 





Slave 2 


Figure 13-22. Bus Busy (BB) and Transfer Start (TS) Connection Example 


Figure 13-23 shows an example bus arbitration between two contending masters. 
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CLKOUT 
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Figure 13-23. Bus Arbitration Timing Diagram 


The MPC850 can be configured at system reset to use the internal bus arbiter. In this case, 
the MPC850 is parked on the bus. Section 10.4.2, “SIU Module Configuration Register 
(SIUMCR),” describes prioritization of external devices relative to the internal MPC850 
bus masters. If the external device requests the bus and the MPC850 does not require it, or 
the external device has higher priority than the current internal bus master, the MPC850 
grants the bus to the external device. Figure 13-24 shows the internal finite state machine 
that implements the arbiter protocol. 
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Figure 13-24. Internal Bus Arbitration State Machine 


13.4.6.4 External Bus Parking 


During external arbitration, the MPC850 supports bus parking. If the MPC850 detects that 
an external arbiter has asserted BG to it and BB is negated, the MPC850 starts a transfer 
without asserting BR. 


13.4.7 Address Transfer Phase-Related Signals 


The following sections describe the address transfer phase-related signals. 


13.4.7.1 Transfer Start (TS) 


The transfer start signal (TS) indicates the beginning of a transaction on the bus addressing 
a slave device. A device should assert TS only after the arbitration protocol has granted 
mastership. TS is asserted only for the first cycle of the transaction and is negated in the 
successive clock cycles until the end of the transaction. To avoid contention, the master 
should three-state this signal when it relinquishes the bus. This situation indicates that an 
external pull-up resistor should be connected to TS to avoid having a slave recognize this 
signal as asserted when no master drives it; see Figure 13-22. 
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13.4.7.2 Address Bus 

The 26-bit address bus, A[6—31], is byte addressable, so each address can address one or 
more bytes. A[6] is the msb. The address and its attributes are driven on the bus with TS; 
they remain valid until the bus master receives a transfer acknowledge from the slave. To 
distinguish an individual byte, the slave device must observe the TSIZ signals. 


13.4.7.3 Transfer Attributes 

The transfer attributes signal group consists of RD/WR, BURST, TSIZ[0-1], AT[0-3], 
STS, and BDIP. These signals (with the exception of the BDIP) are available at the same 
time as the address bus. 


| 13.4.7.3.1 Read/Write (RD/WR) 

RD/WR high indicates a read access and low indicates a write access. Driven at the 
beginning of a bus cycle, RD/WR is valid at the rising edge of the clock in which TS is 
asserted. RD/WR changes levels only when a write cycle is preceded by a read cycle or vice 
versa. It may remain low for consecutive write cycles. 


13.4.7.3.2 Burst Indicator (BURST) | | 
BURST is driven by the bus master at the beginning of the bus cycle (along with the 
address) to indicate that the transfer is a burst transfer. 


13.4.7.3.3 Transfer Size (TSIZ) | 

TSIZ[0-—1] indicates the size of the requested data transfer. The TSIZ signals may be used 
with BURST and A[30—31] to determine which data byte lanes are used in the transfer. For 
nonburst transfers, TSIZ[O—1] specifies the number of bytes starting from the byte location 
addressed by A[30—31]. In burst transfers, the value of TSIZ[O-1] is always 00. 


Table 13-4. BURST/TSIZ Encoding 


a 


13.4.7.3.4 Address Types (AT) | 


The address type signals (AT[O—3]), PTR and RSV, are outputs that indicate one of 16 
address types to which the address applies. These types are designated as either a 
normal/alternate master cycle, user/supervisor (problem/privilege), and instruction/data 
types. The address type signals are valid at the rising edge of the clock in which the special 
transfer start (STS) signal is asserted. 



























- BURST 
1 
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Address type signals reflect the current status of the master originating the access, not 
necessarily the status in which the original access to this location has occurred. An example 
of this situation is when a modified data cache block is copied back after the privilege level 
of the processor has been changed since the last access to the same cache block. A 
functional usage of the address type signal RSV is for the reservation protocol described in 
Section 13.4.9, “Memory Reservation.” Table 13-5 provides the space definition encoded 
by the STS, TS, AT[O—3], PTR, and RSV. 


Table 13-5. Address Types Definition 


Core/| _ User/ Reservation/ | Program | | 
STS | TS} CPM | Supervisor pape Program eons) Address Space Definitions 
(ATO) (AT1) Trace (AT3) 
1 X Xx X No transfer or not the first 
transaction of a transfer 
Pepys [= | 


bh | Core-initiated, normal 
a 
| Co 


instruction, program trace, 
{ 


supervisor mode 
Core-initiated, normal 
instruction, supervisor mode 
Core-initiated, reservation 
data, supervisor mode 
| a 

| 1 Core-initiated, normal 

instruction, user mode 
1 1 Core-initiated, reservation 
data, user mode 
1 1 1 Core-initiated, normal data, 

user mode 


Core-initiated, normal data, 
supervisor mode 

1 AT1 AT2 AT3 1 1 DMA- initiated, normal, 
AT[1—3] user-programmable 
(see IDMA and DMA 
function code registers) 


Core-initiated, normal 
instruction, program trace, 
user mode 
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Table 13-5. Address Types Definition (Continued) 





User/ ienuclon/ Reservation/ | Program 
Program 


Data (AT2) | trace (AT3) 


Reservation gels 
(RSV) Address Space Definitions 
Core-initiated, show cycle 
address instruction, 
program trace, 
supervisor mode 


Core-initiated, show cycle 
address instruction, 
supervisor mode 


Core-initiated, reservation 
show cycle data, supervisor 
mode 


Core-initiated, show cycle | 
data, supervisor mode 


Core-initiated, show cycle 
address instruction, 
program trace, 

user mode 


Core-initiated, show cycle 
address instruction, user 
mode 


Core-initiated, reservation 
show cycle data, user mode 


Core-initiated, show cycle 
data, user mode 


DMA- initiated, normal, 
AT[1—3] user-programmable | 
(see IDMA and DMA 

function code registers) 


i 
fe 
i 
Le * 4 


‘Show cycles’ are accesses to the core’s internal bus devices. These accesses are made 
visible externally for emulation and debugging. A show cycle can have one address phase 
and one data phase (or just an address phase for the instruction show cycles). The cycle can 
be a write or a read access. The address of the show cycle is valid on the bus for one clock 
and the data of the show cycle is valid on the bus for one clock. The data phase does not 
require a transfer acknowledge to terminate the bus-show cycle. In a burst-show cycle only 
the first data beat is shown externally. | 


When AT3 = O for an access from the core, it indicates either program trace (for an 
instruction cycle) or reservation (for a data cycle). These indications can also be monitored 
on two separate signals (PTR and RSV), if desired. 


¢ PTR is low when the following is true: 
— ATO =0 (Core access) 
— AT2 =0 Unstruction) 
— AT3 =0 (Program Trace) 
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e RSV is low when the following is true: 
— ATO =0 (Core access) 
— AT2 = 1 (Data) 
— AT3 = 0 (Reservation) 
13.4.7.3.5 Burst Data in Progress (BDIP) 


The master asserts BDIP to indicate to the slave that another data beat follows the current 
data beat. 


13.4.8 Termination Signals 
The following sections discuss the termination signals supported by the MPC850. 


13.4.8.1 Transfer Acknowledge (TA) 


TA indicates normal completion of the bus transfer. The slave asserts TA with every data 
beat returned or accepted during a burst cycle. 


13.4.8.2 Burst Inhibit (Bl) 


The slave asserts BI to indicate to the master that it cannot burst. If this signal is asserted, 
the master must transfer in multiple cycles and increment the address for the slave to 
complete the burst transfer. 


13.4.8.3 Transfer Error Acknowledge (TEA) 


Terminates the bus cycle under a bus error condition for which the current cycle is aborted. 
TEA overrides other cycle termination signals, such as TA. 


13.4.8.4 Termination Signals Protocol 

The transfer protocol was defined to avoid electrical contention on lines that can be driven 
by various sources. To do that, a slave should not drive signals associated with the data 
transfer until the address phase is completed and it recognizes the address as its own. The 
slave should disconnect from signals immediately after it has acknowledged the cycle and 
no later than the termination of the next address phase cycle. This indicates that termination 
signals should be connected to power through a pull-up resistor to prevent a master from 
sampling undefined values in any of these signals when no real slave is addressed. See 
Figure 13-25 and Figure 13-26. 
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Figure 13-25. Termination Signals Protocol Basic Connection 
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Figure 13-26. Termination Signals Protocol Timing Diagram 


13.4.9 Memory Reservation 











The MPC850 memory reservation protocol supports multilevel bus structures. For each 
local bus, reservations are handled by the local reservation logic. The protocol tries to 
optimize reservation cancellation such that a PowerPC processor is notified of memory 
reservation loss on a remote bus only when it has issued a STWCX cycle to that address. 
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That is, the reservation loss indication comes as part of the STWCX cycle, which avoids 
the need for fast memory reservation loss indication signals between each remote bus and 
each PowerPC master. The memory reservation protocol assumes the following: 


e Each processor has no more than one reservation flag. 


e Iwarx sets the reservation flag. 


e lwarx by the same processor clears the reservation flag related to a previous lwarx 
instruction and again sets the reservation flag. 


e stwex. by the same processor clears the reservation flag. 
e Store by the same processor does not clear the reservation flag. 


e Some other processor (or other mechanism) store to the same address as an existing 
reservation clears the reservation flag. 


e If memory reservation is lost, itis guaranteed that stwex. will not modify the 
memory. 


13.4.9.1 Kill Reservation (KR) 


KR is a bused signal. In order to use it, the reservation logic must only remember that one 
of the bus masters has a reservation for a particular address. If another bus master writes to 
the address with an instruction other than stwex., the reservation logic remembers that the 
reservation for that address was lost. When the master with the reservation subsequently 
attempts an stwex. instruction to that address, the reservation logic responds to that external 
bus cycle with KR. 


Figure 13-27 shows the reservation protocol for a multi-level (local) bus. The system 
describes a situation in which the reserved location is in the remote bus. 
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Figure 13-27. Reservation on Multilevel Bus Hierarchy 
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In this case, the buses’ interface block implements a reservation flag. for the local bus 
master. The reservation flag is set by the buses’ interface when a load. with the local bus 
master issues a reservation whose address is on the remote bus. The flag is reset when an 
alternative master on the remote bus accesses the same location in a write cycle. If the 
MPC850 begins a memory cycle to the previously reserved address (located in the remote 
bus) as a result of a stwex., the following two cases can occur: 


¢ If the reservation flag is set, the local bus interface acknowledges the cycle in a 
normal way. 


¢ Ifthe reservation flag is reset, the local bus interface should assert KR. However, the 
local bus interface should either not perform the remote bus write access or abort it 
if the remote bus supports aborted cycles. The failure of stwex. is reported to the 
core. 


13.4.10 Bus Exception Control Cycles 


The MPC850 bus architecture requires assertion of the TA from an external device to signal 
that the bus cycle is complete. TA is not asserted in the following cases: 


¢ The external device does not respond — 


e Various other application-dependent errors occur 


External circuitry or the internal MPC850 bus monitor can provide TEA when no device 
responds by asserting TA within an appropriate period of time after the MPC850 initiates 
the bus cycle. This allows the cycle to terminate and the processor to enter exception 
processing for the error condition (each one of the internal masters causes an internal 
interrupt under this situation). 


To properly control termination of a bus cycle for a bus error, TEA must be asserted at the 
same time or before TA is asserted. Once TEA is sampled as asserted, it should be negated 
before the next rising edge to avoid influencing the next initiated bus cycle. TEA is an 
open-drain pin that allows the wire-OR of different sources of error generation. 


13.4.10.1 RETRY 


When an external device asserts RETRY during a bus cycle, the MPC850 enters a sequence 
in which it terminates the current transaction, relinquishes bus ownership, and retries the 
cycle using the same address, address attributes, and data (in the case of a write cycle). 
Figure 13-28 shows that when the internal arbiter is enabled, MPC850 negates BB and 
asserts BG in the clock cycle after RETRY is detected to allow any external master to gain 
bus ownership. Normal arbitration resumes in the next clock cycle. If the external master 
does not use the bus, the MPC850 initiates a new transfer with the same address and 
attributes as before. In Figure 13-29 the same situation is shown where the MPC850 is 
working with an external arbiter. In this case, in the clock cycle after RETRY is detected 
asserted, BR and BB are negated together. Normal arbitration resumes one clock cycle later. 
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Figure 13-28. Retry Transfer Timing—Internal Arbiter 
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Figure 13-29. Retry Transfer Timing—External Arbiter 


When the MPC850 initiates a burst access, the bus interface only recognizes the RETRY 
assertion as a retry termination if it detects it before the slave device acknowledges the first 
data beat. When RETRY is asserted as a termination signal on the second or third data beat 
of the access (being the first data beat acknowledged by a normal TA assertion), it is 
processed by the MPC850 as a TEA. 
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Figure 13-30. Retry on Burst Cycle 


If a burst access is acknowledged on its first beat with a normal TA, but with BI asserted, 
the following single-beat transfers initiated by the MPC850 to complete the 16 byte 
transfers process the RETRY signal assertion as a TEA. If the MPC850 initiates non-burst 
access to a small port size device, the transfer size of the access is bigger than the slave port 
size, and the first transfer of this access is terminated normally by the assertion of TA, then 
subsequent single-beat transfers initiated by the MPC850 to complete the access process 
the RETRY assertion as a TEA. 


Table 13-6 summarizes how the MPC850 recognizes the termination signals provided by 
the slave device that is addressed by the initiated transfer. 
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Table 13-6. Termination Signals Protocol 
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Chapter 14 
Clocks and Power Control 


The MPC850 clock system provides many different clocking options for all on-chip and 

external devices. For its clock sources, the MPC850 contains phase-locked loop and crystal 

oscillator support circuitry. The phase-locked loop circuitry can be used to provide a 
high-frequency system clock from a low-frequency external source. Also, to enable flexible 

power control, the MPC850 provides frequency dividers and a variety of low-power mode 

options. 


The MPC850 allows a system to optimize power utilization by providing performance 
on-demand. This is implemented through a variety of programmable power-saving modes 
with automatic wake-up features. 


Figure 14-1 illustrates internal clock source and distribution that includes the system 
phase-locked loop (SPLL), clock dividers, drivers, and crystal oscillator. 


14.1 Features 


The main features of the MPC850 clocks and power control system are as follows: 


e Contains system PLL (SPLL) 
e Supports crystal oscillator circuits 
e Clock dividers are provided for low-power modes and internal clocks 
e Contains five major power-saving modes 
— Normal (high and low) 
— Doze (high and low) 
— Sleep 
— Deep sleep 


— Power down 
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Figure 14-1. Clock Source and Distribution 


14.2 The Clock Module 


The clock module consists of two external reference sources and a programmable 
phase-locked loop, arranged as shown in Figure 14-2. 
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Figure 14-2. Clock Module Components 


14.2.1 External Reference Clocks 


The MPC850 has two input clock sources, provided at the EXTCLK pin or at the EXTAL 
and XTAL pins. These two clock sources can select to drive three internal clock signals, 
referred to as OSCCLK, PITRTCLK, and TMBCLK. OSCCLK provides the input clock to 
the phase-locked loop. PITRTCLK and TMBCLK provide dedicated clocks for special 
system timer circuitry, which includes the periodic interrupt timer (PIT), real-time clock 
(RTC), timebase (TB), and decrementer (DEC) in the SIU. These separate clock sources for 
the PIT, RTC, TB, and DEC are provided to enable these modules to continue to count at a 
fixed, user-defined rate regardless of system frequency. 


The clock sources for OSCCLK, PITRTCLK, and TMBCLK are selected at reset. The 
sources for PITRTCLK and TMBCLK can also be selected in software by manipulation of 
SCCR;; see Section 14.6.1, “System Clock and Reset Control Register (SCCR).” For more 
information, see Section 14.2.2.1, “SPLL Reset Configuration’, Section 14.3.2, “The PIT 
and RTC Clock (PITRTCLK)”, and Section 14.3.3, “The Time Base and Decrementer 
Clock (TMBCLK).” 


It is possible to use both clock sources in a system, with each providing reference for 
different functions. If either reference source is not used, then its input should be grounded. 


It is not recommended to select the crystal oscillator circuit as OSCCLK while also driving 
a high-frequency clock source on EXTCLK. This is because noise from the EXTCLK clock 
source will couple into the crystal oscillator circuit, and will in many cases not allow the 
system phase-locked loop (SPLL) to lock. The converse, however, is allowable; EXTCLK 
can be selected as OSCCLK, while the crystal oscillator circuit supplies a separate 
low-frequency reference. 
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A typical configuration uses a canned oscillator (4 MHz or 50 MHz) with the EXTCLK 
input selected as OSCCLK, and a 32.768 kHz or 38.4 kHz crystal at EXTAL and XTAL to 
provide PITRTCLK. 


14.2.1.1 Off-Chip Oscillator Input (EXTCLK) 


The external clock input EXTCLK is generated from an external source, which is typically 
a canned oscillator. The acceptable frequency range of this input source is defined by: 


1. The maximum operating frequency of the MPC850 


2. The default SPLL multiplying factor (defined in Section 14.2.2.1, “SPLL Reset 
Configuration’) 


3. The minimum operating frequency of the SPLL, which is 15 MHz 
14.2.1.2 Crystal Oscillator Support (EXTAL and XTAL) 


The MPC850 provides support for crystal oscillator circuits with the oscillator module 
(OSCM). The OSCM has two different modes, supporting two different ranges of 
frequencies: 30-50 kHz (referred to as 32 kHz mode) or 3-5 MHz (referred to as 4 MHz 
mode). The mode of OSCM is selected simultaneously with SPLL configuration; refer to 
Section 14.2.2.1, “SPLL Reset Configuration. | 3 


The clock source of OSCM can be provided by a crystal circuit or an external oscillator. If 
an external oscillator is used, it should be connected to EXTAL, and XTAL should be left 
unconnected. If a crystal circuit is used, it should be connected between EXTAL and 
XTAL. The crystal circuit is composed of an on-chip inverting amplifier, an external 
parallel resonant crystal, two capacitors, and two resistors, as shown in Figure 14-3. 
EXTAL is the amplifier input for the crystal circuit; XTAL is the amplifier output. 


Example values for the passive components of the crystal circuits are provided in 
Figure 14-3. However, because this is a sensitive analog circuit, these values cannot be 
guaranteed. These components may have to be tuned due to design-specific parasitic 
capacitance variation due, for example, to layout and board composition. Careful 
consideration must be given to component placement and layout, keeping components as 
near as possible to the chip and keeping all trace lengths to a minimum. It should be noted 
that the sensitivity of crystal circuits to external component values is so great that even 
probing the circuit will change its behavior to the point that it may fail to resonate. In 
practice, experimentation will be required to find an acceptable range of component values, 
with the final design value being selected in the middle of this range. 


Lastly, it should also be noted that future changes in the device technology (shrinks) may 
change the characteristics of the input and output impedance of the on-chip amplifier. 
Motorola reserves the right to perform these changes, and designers should be prepared to 
modify their crystal circuits appropriately should these changes cause their crystal circuit 
designs to fail. This risk should be taken into account when the design is performed; if 
potential manufacturing downtime due to redesign of crystal circuits is unacceptable, a 
canned oscillator circuit should be used instead. 
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Crystal 





32 kHz: R1=20MQ, R2=330kQ, C1=20pF, C2=20pF 
4 MHz: R1=10MQ, R2=1kQ, C1=47 pF, C2=56 pF pea 
14 


Figure 14-3.Crystal Circuit Examples 


14.2.2 System PLL 


The programmable phase-locked loop, called the system phase-locked loop (SPLL) in the 
MPC850 , generates the overall system operating frequency in integer multiples of the input 
clock frequency. The SPLL reference clock (OSCCLK) can be generated from either of the 
external clock sources described in Section 14.2.1, “External Reference Clocks.”” 


The main purpose of the SPLL is to generate a stable reference frequency by multiplying 
the frequency and eliminating the clock skew. The SPLL allows the processor to operate at 
a high internal clock frequency using a low frequency clock input, providing two 
advantages. First, lower frequency clock input reduces the overall electromagnetic 
interference generated by the system. Second, the programmability of the oscillator enables 
the system to operate at a variety of frequencies with only a single external clock source. 
The MPC850 SPLL block diagram is shown in Figure 14-4. 
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Figure 14-4. SPLL Block Diagram 


The OSCCLK signal goes to the phase comparator that controls the direction in which the 
charge pump drives the voltage across the external filter capacitor (XFC). Direction is based 
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on whether the feedback signal phase lags or leads the reference signal. The output of the 
charge pump drives a voltage-controlled oscillator (VCO). The VCO output frequency 
(VCOOUT) is divided down and fed back to the phase comparator to be compared with the 
reference frequency (OSCCLK signal). The multiplication factor is programmable in the 
PLPRCR[MEF] between 1 and 4,096. 


The minimum VCOOUT operating frequency of the SPLL is 15 MHz. This condition must 
be maintained both by the reset configuration settings of the SPLL and at the final operating 
frequency of the SPLL. 


The OSCCLK can be supplied by either a crystal or an external clock oscillator. Crystals 
are typically much cheaper than clock oscillators; however, a clock oscillator has significant 
design advantages over a crystal circuit in that clock oscillators are easier to work with, 
resulting in faster design, debugging and production. 


Furthermore, it should be noted that low-frequency crystals should not be used for the 
source of OSCCLK if high-frequency SPLL operation is desired. This is because the 
default startup multiplication factor of the SPLL requires a loop filter capacitor (XFC) 
which is incompatible with the capacitor value required at the final operating frequency. For 
example, if a 50 MHz final value was desired and a 32.768 kHz crystal was used, the XFC 
range allowable by the default SPLL multiplication factor of 513 is 0.27 uF < XFC < 0.47 
uF, whereas the final SPLL multiplication factor of 1526 would require an XFC range of 
0.79 uF < XFC < 1.40 uF. 


14.2.2.1 SPLL Reset Configuration 

While PORESET is asserted, the reset configuration of the SPLL is sampled on the 
MODCK[I1-2] pins. The SPLL. immediately begins to use the multiplication factor 
PLPRCR[MF] value and external clock source for OSCCLK determined by the sampled 
MODCK[1-2] pin and attempts to achieve lock; therefore, the MODCK[1-2] signals should 
be maintained steadily throughout PORESET assertion. The MF field is set as shown in 
Table 14-1. After PORESET is deasserted, the MODCK[1-2] values are internally latched, 
and the signals applied to MODCK{[1-2] can then be changed. 


Table 14-1. Power-On Reset SPLL Configuration 


MODCK [1-2] | Default MF+1 at Power-On Reset SPLL Options Selected 


OSCCLK (SPLL input) is OSCMfreq 
| {referred to as 32 kHz mode] 


OSCCLK (SPLL input) is OSCMfreg 
[referred to as 4 MHz mode] 







OSCCLK (SPLL input) is EXTCLKtreq 


OSCCLK (SPLL input) is EXTCLK reg 


Note that under no condition should the voltage on MODCK1 and MODCK2 exceed the 
power supply voltage VDDH applied to the part. 
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At power-on reset, before the PLL achieves lock, no internal or external clocks are 
generated by the MPC850 , which may cause higher than normal static current during the 
short period of stabilization. 


14.2.2.2 SPLL Output Characteristics and Stability 


The minimum frequency at which the SPLL is guaranteed to operate is 15 MHz; therefore, 
the MPC850 must be configured so that at all times (both after initial system reset and at 
the final operating frequency) the minimum frequency of CLKOUT is 15 MHz. The 
maximum frequency at which the SPLL is guaranteed to operate is the maximum rated 
frequency of the part (for example, 50 MHz for a 50-MHz part). 


The multiplication factor is the most important parameter in defining the SPLL stability. 
There are three factors related to the multiplication factor that define SPLL stability: 


e Phase skew—The time difference between the rising edges of EXTAL and 
CLKOUT for a capacitive load on the CLKOUT pin over the entire process, 
temperature ranges, and voltage ranges. For input frequencies greater than 15 MHz 
and (MF+1)s2, this skew is +0.9 ns. Otherwise, this skew is not guaranteed. 
However, for (MF+1)<10 and input frequencies greater than 10 MHz, the skew is 
+2.3 ns. 


e Phase jitter— A variation in the skew that occurs between the rising edges of EXTAL 
and CLKOUT for a specific temperature, voltage, input frequency, MF, and 
capacitive load on the CLKOUT pin. These variations are a result of the PLL locking 
mechanism. For input frequencies greater than 15 MHz and (MF+1)s2, this jitter is 
less than +0.6ns. Otherwise, this jitter is not guaranteed. However, for (MF+1)<10 
and input frequencies greater than 10 MHz, this jitter is less than +2ns. 


e Frequency jitter—The frequency variation of CLKOUT . For small multiplication 
factors, that is, (MF+1)<10, this jitter is smaller than 0.5%. For mid-range 
multiplication factors (10<(MF+1)<500), this jitter is between 0.5% and ~2%. For 
large multiplication factors ((MF+1)>500), the frequency jitter is 2-3%. The 
maximum input frequency jitter on EXTAL is 0.5%. If the rate of change of the 
frequency of EXTAL is slow (that is, it does not jump between the minimum and 
maximum values in one cycle), the maximum jitter can be 2%. 


14.2.2.3 The System Phase-Locked Loop Pins (VDDSYN, VSSSYN, 
VSSSYN1, XFC) 

The internal frequency of the MPC850 and the output of the CLKOUT pin depend on the 
quality of the input clock source and the PLPRCR[MF]. The SPLL contains the following 
dedicated pins that are isolated from common power and ground. 


e VDDSYN—The power supply pin for the analog SPLL circuitry. For requirements 
concerning this power supply, refer to Section 14.4.3, “Clock Synthesizer Power 
(VDDSYN, VSSSYN, VSSYN1). 
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VSSSYN and VSSSYN1—Ground reference pins for the analog SPLL circuitry. For 


requirements concerning this ground reference, refer to Section 14.4.3, “Clock 
Synthesizer Power (VDDSYN, VSSSYN, VSSYN1). | 


XFC— The external filter capacitor pin that connects to the off-chip capacitor for the 
SPLL filter. One terminal of the capacitor is connected to XFC while the other 
terminal is connected to the VDDSYN pin. y | 


_— For proper SPLL operation, the XFC capacitor must be low leakage, with a 


minimum parallel parasitic resistance value of 30MQ. 


— The value of the XFC capacitor is based on the value of the MF field in the 
PLPRCR. XFC should be selected so that it satisfies both the range of values 
required by the MF determined at reset and by the MF value programmed as the 
final operating value. | 


Table 14-2. XFC Capacitor Values Based on PLPRCR[MF] 


1<(MF+1)<4 | XFC =[(MF+#1) x 425)-125 | XFC =[(MF4+1) x 590] - 175 


MF > 4. XFC = (MF+1) x 520 XFC = (MF+1) x 920 oF 













— Note that the these ranges are not strict cutoffs; they merely represent ranges 
where the best jitter performance will be achieved. If there is no overlap between 
two ranges of operation, choose the minimum or maximum value of the 
recommended XFC range for the normal operating frequency of the system, 
whichever is nearest the range for the other frequency. 7 
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14.2.2.4 Disabling the SPLL 


For special purposes, such as testing, it is possible to disable the SPLL. The SPLL is 
disabled if VDDSYN is grounded. In this case, VCOOUT will be equal to OSCCLK/2. 


Note that because the skew elimination provided by the SPLL is also disabled, this mode 
of operation invalidates the timing of the MPC850. Thus, this mode must not be used as a 
normal operating mode; its only valid use is for low-frequency testing of board integrity 
during production. 


14.3 Clock Signals 


The MPC850 uses the following clocks, summarized in Table 14-3. These clocks are 
described in the following three sections, grouped by their different sources. 


Table 14-3.Functionality Summary of the Clocks 


ee 
GCLK1C/GCLK2C | Basic clocks supplied to the core, the data and instruction caches, and MMUs. 
GCLK1/GCLK2 Basic clocks supplied to the SIU, clock module, CP, and most other features in the CPM 


GCLK1_50/GCLK2_50 | Optionally divided versions of GCLK1/GCLK2, which are used to clock the GPCM and UPM in 
the memory controller and to provide the CLKOUT output for the external bus. 


BRGCLK Clocks the four baud rate generators and the memory controller refresh timer. This allows the 
serial ports to operate at a fixed frequency and the memory refresh to continue at a uniform 
rate even when the rest of the MPC850 is operating at a reduced frequency (for example, 
when in normal low or doze low modes) 


SYNCCLK 
Clock out is an external clock signal used to drive other devices, and thus provide the ability to 


CLKOUT 
a | operate synchronously with those devices. Equivalent to the internal GCLK2_50 signal. 


TMBCLK Clocks the time base and decrementer 
PITRTCLK Clocks the periodic interrupt timer and the real time clock 


14.3.1 Clocks Derived from the SPLL Output 


The MPC850 uses the following 9 internal clock signals, which are derived from the SPLL 
output clock (VCOOUT): 


¢ General system clocks—GCLK1C, GCLK2C, GCLK1, GCLK2 

e Memory controller and external bus clocks —GCLK1_50, GCLK2_50 
e Baud rate generator clock —BRGCLK 

e Synchronization clocks—SYNCCLK, SYNCCLKS 

















Used by the serial synchronization circuitry in the serial ports of the CPM, and includes the SI, 
SCCs and SMCs. SYNCCLK performs the function of synchronizing externally generated 
clocks before they are used internally. SYNCCLK allows the SI, SCCs, and SMCs to continue 
operating at a fixed frequency, even when the rest of the MPC850 is operating at a reduced 
frequency. 
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The MPC850 also provides the GCLK2_50 signal externally on the CLKOUT pin. | 


The SPLL output VCOOUT is sent to frequency dividers that generate the GCLKx, 
GCLKxC, GCLKx_50, SYNCCLK, and BRGCLK which are sent to the rest of the 
modules of the MPC850 . The division factor for each divider is programmed in the SCCR. 
The organization of the low-power dividers is shown in Figure 14-5. 


VCOOUT 


DFSYNC ed Scie . CPM 



























































DFBRG | BRGCLK | 
CPM and 
| - UPM 
Sleep L | (Refresh 
Mode P GCLK2C Timers) 
Phase 
GCLK2 . 
UPM and 
ee | | GCLK1 SIU 
EBDF GCLK1_60 Timer 
: Phase Module, 
~ @CLK2_50 Core, 
. | : al and CPM 
Low-Power > CLKOUT 


Mode 
Figure 14-5. Clock Dividers 


14.3.1.1 The Internal General System Clocks (orn GCLK2C, 
GCLK1, GCLK2) 


The GCLKxC and GCLKx signals are referred to here collectively as GCLKx. The 
difference between the GCLKxC and GCLKx signals are as follows: 7 


¢ The GCLKxC clocks are supplied to the core, data and instruction caches, and 
memory management unit. They are not active when the MPC850 is in doze, sleep, © 
or deep-sleep modes. 


¢ The GCLKx clocks are supplied to the SIU, clock module, memory controller, and 
most of the other blocks in the CPM. They are not active when the MPC850 is in 
sleep or deep-sleep modes. 


GCLKx can be dynamically switched between two different frequencies determined by 
dividers programmed in SCCR[DFNH] and SCCR[DFNL], as shown in Figure 14-6. 
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Figure 14-6. Low-power dividers for GCLKx 


The high frequency is generated by using the DFNH field in the SCCR and it is used in 
normal high and doze high mode. The low frequency is generated using the DFNL field in 
the SCCR and it is used in normal low and doze low mode. The DFNH and DFNL dividers 
are cleared by HRESET, and therefore GCLKx defaults to VCOOUT. 


The frequency for the GCLKx system clock is: 


VCOOUT 4 
(2OF NA) r(QOFNE +1 


When GCLKx is divided, its duty-cycle is modified. One phase remains the same while the 
other stretches out. GCLKx no longer has a 50% duty cycle when the division factor is 
greater than 1, as shown in Figure 14-7. 


GCLK1 Divided by 1 Pe ee a Sa ey ed rey ae 


GCLK1 Divided by 2 | | | | | | | | | | 
GCLK2 Divided by 2 | | | | | | | | | | 
GCLK1 Divided by 4 | | | | | | 


GCLK2 Divided by 4 | | | | | | 


Figure 14-7. Divided System Clocks (GCLKx) Timing Diagram 


GCLKXtrq = 
) 


14.3.1.2 Memory Controller and External Bus Clocks (GCLK1_ 50, 
GCLK2_50, CLKOUT) 


The MPC850 provides the capability to run the external bus and memory controller at a 
lower frequency than the internal modules. This capability is provided by the external bus 
frequency dividers. The external bus clocks GCLK1_50 and GCLK2_50 are derived from 
GCLK1 and GCLK2, as determined by the SCCR[EBDF]. SCCR[EBDF] is cleared by 
HRESET, and thus GCLK1_50 and GCLK2_50 default to GCLK1 and GCLK2. The 
timing relationship between GCLKx and GCLKx_50 is shown in Figure 14-8. 
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GCLK1 | | | | | | | | 


GCLK2 | | 


GCLK1_50 
(EBDF=00) 

| | | | | | 
GCLK2_50 ! | | 
(EBDF=00) _—s'! | | 

| 
CLKOUT | | | | | | 
(EBDF=00) | | 

| 3 | | 

(EBDF=01) | = 
GCLK2_50 | | | | | | 
(EBDF=01) | | | | | | | 

| | | 
CLKOUT | | | | | | 
(EBDF=01) | | I 


Figure 14-8. Memory Controller and External Bus Clocks Timing Diagram for 
EBDF=0 and EBDF=1 : 


If SCCR[EBDF]=0, the duty cycle of both GCLK1_50 and GCLK2_50 is 50%. However, 
if SCCR[EBDF]=1, the duty cycle of GCLK2_50 is 50%, but the duty cycle of GCLK1_50 
is 37.5%, as shown in Figure 14-8. 


The low-power frequency dividers described in Section 14.3.1.1, “The Internal General 
System Clocks (GCLK1C, GCLK2C, GCLK1, GCLK2)” also effect the frequency and 
duty cycle of GCLK1_50, GCLK2_50, and CLKOUT. For an example of this, see 
Figure 14-9. 7 | 
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GCLK1 l | 


| | | | | 
GCLK2 | | | | 
| | | | 
| | 
GCLK1_50 | 
(EBDF=00) | 
GciK2s0 | | | | 
(EBDF=00) si | | | 
| | 
CLKOUT | | | | | 
(EBDF=00) | | | 
| 
GCLK1_50 | , | 
(EBDF=01) | | 





GCLK2_50 | | | | | 
(EBDF=01) | | | | | 
| | | | 
CLKOUT ) | | ) 
(EBDF=01) | , 
| 


Figure 14-9. Memory Controller and External Bus Clocks Timing Diagram for 
(CSRC=0 and DFNH=1) or (CSRC=1 and DFNL=0) 


The frequency of GCLK1_50 and GCLK2_50 are effected both by the SCCR[DFNH] and 
_ SCCR[DFNL] dividers and by the SCCR[EBDF] divider. Thus, the frequency for 
GCLKx_50 and CLKOUT is: 
VCOOUT 94 


GCLKx_50 = XX SS 
freq (QDENH) 9 (DFNL +7) EBDF +1 


CLKOUT is the only externally visible clock, and is equivalent to the internal signal 
GCLK2_50. CLKOUT can drive at full-strength, half-strength, or it can be disabled. The 
strength of the drive is controlled in the system clock and reset control register. Disabling 
or decreasing the strength of CLKOUT reduces power consumption, noise, and 
electromagnetic interference on the printed circuit board. While the SPLL is acquiring lock, 
the CLKOUT signal does not oscillate and remains in a low state. 
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14.3.1.3 CLKOUT Special Considerations: 1:2:1 Mode 


To enable synchronization of a system to the EXTCLK signal while still allowing the 
internal circuits of the MPC850 to operate at an increased frequency, it is necessary to 
maintain synchronization of the EXTCLK and CLKOUT signal. Specifically, this operation 
entails: 


e input clock source EXTCLK 


e internal clock of 2xEXTCLK, provided by multiplying EXTCLK by 2 in the SPLL 
(by programming PLPRCR[MF]=1) 

e external bus clock CLKOUT with frequency equivalent to EXTCLK, provided bY 
dividing GCLK2 by 2 (by programming SCCR[EBDF]=01) 


This 1s also known as 1:2:1 mode. In this mode, in order to allow multiple devices clocked 
by the same EXTCLK source to maintain synchronization on the external bus, EXTCLK 
and CLKOUT must be in phase. This operation cannot be guaranteed on MPC850s prior to 
revision C. On MPC850s of revision C or later, this operation can be guaranteed, but it 
requires that SCCR[EBDF] be written first, followed by the write to PLPRCR[MF']. 


14.3.1.4 The Baud Rate Generator Clock (BRGCLK) 


The baud rate generator clock (BRGCLK) is used by the four baud rate generators of the 
communication processor module and by the memory controller refresh counter. The baud 
rate generator clock is controlled independently in order to allow the baud rate generators 
and memory refresh rate to continue operating at a fixed frequency, even when the rest of 
the MPC850 is operating at a reduced frequency. | 


BRGCLK defaults to VCOOUT, but can be reduced in frequency by a frequency divider. 
This frequency divider is controlled by SCCR[DFBRG]. 






CPM and 
UPM 
(Refresh 
Timer) 





VCOOUT DFBRG ee 


Figure 14-10. BRGCLK Divider 


The baud rate generator clock frequency is: 
VCOOUT,, eq 


2x DFBRG 


BRGCLK = 
fre 
_ (2 ) 


14.3.1.5 The Synchronization Clock (SYNCCLK, SYNCCLKS) 


The synchronization clock signals (SYNCCLK and SYNCCLKS, referred to collectively 
as SYNCCLK) are used by the signal synchronization circuitry in the serial ports of the 
communication processor module. The signal synchronization circuitry is used to sample 
and synchronize asynchronous external signals provided to these ports. SY NCCLK allows 
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the serial interface, serial communication controller, and serial management controllers to 
continue operating at a fixed frequency, even when the rest of the MPC850 is operating at 
a reduced frequency. 


SYNCCLK defaults to VCOOUT, but can be reduced in frequency by a frequency divider. 
This frequency divider is controlled by SCCR[DFSYNC]. 


LK 
VCOOUT —-——-—> DFSYNC _ CPM 


Figure 14-11. SYNCCLK Divider 





The synchronization clock frequency 1s: 
VCOOUT oq 


SYNCCLKi og = (2 x DFSYNC, 


Limitations on SYNCCLK include: 
e SYNCCLK must always have a frequency at least as high as GCLKx. 


¢ SYNCCLK must and be at least two times the maximum serial clock rate used by | 
the serial ports in the system. 


e If the time-slot assigner (TSA) is used, SYNCCLK must be at least 2.5 times the 
maximum serial clock rate of the TSA. 


14.3.2 The PIT and RTC Clock (PITRTCLK) 
The PIT and RTC clock is generated either from EXTCLK or the crystal oscillator circuit 


(OSCM). This input source can be divided by either 4 or 512. The PITRTCLK source and 
divide factor are selected by SCCR[RTSEL] and SCCR[RTDIV]. 


When used by the real-time clock (RTC), the PITRTCLK source is first divided as 
determined by RTDIV, and then divided in the RTC circuits by either 8192 or 9600. 
Therefore, in order for the RTC to count in seconds, the clock source must satisfy: 


(EXTCLK or OSCM) / [(4 or 512) x (8192 or 9600)] = 1 
The RTC will operate with other frequencies, but it will not count in units of seconds. 


If there were only one clock source for the system, this requirement would limit the set of 
desirable frequencies at which to operate the MPC850 . However, the MPC850 provides 
two independent clock sources, EXTCLK and OSCM. To allow for maximum flexibility in 
system frequency selection independent of real-time clock operation, it is recommended 
that a 32.768 kHz or 38.4 kHz crystal with the OSCM be used for the PITRTCLK source 
if the RTC is to be used. 
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The MODCK[1-2] state at PORESET deassertion determines the input clock source and 
prescaler value for PITRTCLK. These values can be changed after reset by manipulatin 
the associated bits in the SCCR. | 


Table 14-4. PITRTCLK Configuration at PORESET 


ee 
14.3.3 The Time Base and Decrementer Clock (TMBCLK) 


The time base and decrementer clock is generated either from the input frequency of the 
SPLL (OSCCLK) or the general system clock GCLK2. The SCCR[TBS] bit is used to 
select between these two sources. | oo 






The MODCK[1-2] state at PORESET deassertion, the SCCR[TBS], and the SPLL 
multiplication factor determine the input clock source and prescaler value for TMBCLK. 


Table 14-5. TMBCLK Configuration 


= 
a 
Oc 
a 


14.4 Power Distribution 

The various modules of the MPC850 are connected to four distinct power rails. These 
power rails have different requirements, as explained in the following sections. The 
organization of the power rails is shown in Figure 14-12. 
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MPC850 





OSCM, PIT, 
RTC, TB, 
DEC, SCCR, 
PLPRCR, 
and RSR 





TEXP 








KAPWR 





VDDH 





VDDL VDDSYN 


Figure 14-12. MPC850 Power Rails 


A complete tabulation of modules and power supplies is given in Table 14-6. 


Table 14-6. MPC850 Modules vs. Power Rails 


VDDSYN 


Clock Control 


ae 
aa 
Reece! 
(era 
Internal Logic ee 
Clock Drivers he ena dl 
Analog SPLL 
SCCR, PLPRCR, and RSR Le. 

a 


RTC, PIT, TB, and DEC 





14.4.1 1/O Buffer Power (VDDH) 
The I/O buffers, logic, and clock control are fed by a 3.3V power supply. 


VDDH must in all cases be greater than or equal to VDDL. 
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14.4.2 Internal Logic Power (VDDL) 


The internal logic can be fed by the same 3.3V source which powers VDDH. VDDL is 
identified as a separate power supply only to facilitate power measurements. 


14.4.3 Clock Synthesizer Power (VDDSYN, VSSSYN, VSSYN1) 


To improve stability, the power supply pins for the SPLL are uniquely identified in order to 
allow special filtration to be provided for them. 


A well-regulated voltage should be applied to VDDSYN via a low impedance path to the 
VDDH/VDDL power rail. The allowable noise on the VDDSYN power plane is 20 mV 
peak up to a bandwidth of 100 MHz. This typically requires isolation of the VDDSYN 
power plane from the VDDH/VDDL power plane. An example implementation of this is a 
split power plane, with the VDDSYN plane implemented as an island in the VDDH/VDDL 
power plane, connected to the VDDH/VDDL power plane with an inductor and to the 
ground plane with bypass capacitors. An inductor value of 8.2 mH and bypass capacitor 
values of 0.1 wF and 10 uF provide a two-pole filter with a cutoff frequency of 500 Hz. 


VSSSYN and VSSSYN1 must have a low impedance path to the ground plane. If sufficient 
isolation is provided for VDDSYN (as described above), no additional isolation for 
VSSSYN and VSSSYN1 is required. 


14.4.4 Keep-Alive Power (KAPWR) 


The OSCM, timebase, decrementer, periodic interrupt timer, real-time clock, SCCR, 
PLPRCR, and RSR are all connected to the keep-alive power (KAPWR) rail. This power 
rail architecture allows the system to remove the power at the VDDH/VDDL/VDDSYN 
pins during power-down mode. | : 


When VDDH 1s active, the internal modules connected to KAPWR are instead powered by 
VDDH. KAPWR is only used for this function when power at VDDH is shut off. This 
operation conserves the power of the KAPWR supply. 


14.5 Power Control (Low-Power Modes) 


To optimize power consumption, the MPC850 provides low-power modes that can be used 
to dynamically activate and deactivate certain internal modules, such that only the needed 
modules are operating at any given time. In addition to normal high mode (i.e. fully 
activated), the MPC850 supports normal low, doze high, doze low, sleep, deep-sleep, and 
power-down modes. 


In addition to these power-saving modes, it should be noted that the architecture of the CPM 
inherently supports optimum power consumption. When the CPM is idle, it uses its own 
power-saving mechanism to shut down automatically. 


Low-power modes are controlled in the PLPRCR[LPM] and PLPRCR[CSRC]. Events can 
cause automatic changes from one low-power mode to another. These events include 
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software-initiation (through the MSR[POW]), CPM activity, internal interrupt sources, 
external interrupt sources, and resets. These events are enabled in the SCCR[PRQEN]. 


The characteristics of each low-power mode are summarized in Table 14-7. Table 14-7 also 
provides equations for approximate power consumption equations for each of these modes. 


Table 14-7. MPC850 Low-Power Modes 


GCLKx 
Frequency 


Operation 
Mode 


Wake-Up 
Method 


| SPLL 


Normal high 
LPM=00 


Software-Ini 
tiation, or 
Internal or 
External 
Interrupt 


Normal low 
LPM=00 


VCOOUT 
QDFNL+1 
VCOOUT 
.9DFNH 
VCOOUT 
..DFNL+1 
Active | Inactive Interrupt 
from RTC, 
PIT, DEC, 
TB, IRQx 
Inactive | Inactive Interrupt 
from RTC, 
PIT, DEC, 
TB, [IRQx 


Power-down | Inactive | Inactive Interrupt 

LPM=11 from RTC, 

TEXPS=0 PIT, DEC, 
TB followed 
by external 
hard reset 


internal or 
External 
Interrupt 


Internal or 
External 
Interrupt 


Doze low 


LPM=01 


Sleep 
LPM=10 


Deep-sleep 
LPM=11 
TEXPS=1 


MOTOROLA 


| Wake-Up Event to 


| 3-4 VCOOUT 


_ Chapter 14. Clocks and Power Control 


Typical 
MPC850 Power 
Consumption 
at 50 MHz 


Return Time from 
Functionality 
Normal High 


QDFNH 


Asynchronous =20 mW + 1/2(DFNL+1) w 
exceptions: 
3-4 VCOOUT 


Clocks 


Synchronous 
exceptions 
3-4 GCLK2 Clocks 


=20mW + 0.4/2DFNH yw Enabled: SIU 

timers, CPM, and 

memory 

=20 mW + 0.4/2(DFNL+1)yy controller 
Disabled: core, 
MMU, caches 


<10 mW Enabled: RTC, 
periodic interrupt 
timer, timebase, 
and decrementer 


Clocks 


<500 OSCM Clocks | TBD 
16ms-32 kHz 


<500 OSCM clocks | 32 kHz ~10uA, 

+ power supply KAPWR = 3.0V 
wake-up Temperature = 50° C 
(PwSp_Wake+ 16 

ms at 32 kHz) 
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A state diagram describing transitions between the various low-power modes is shown in 
Figure 14-13. | 





CPM_ACT | MSRPOW | Interrupt | ( CSRC) 





Software-Initiated’ Normal Low 


LPM=00, CSRC=1 












| 3 CPM_ACT & (2 MSRPOW) & 
(Interrupt Cleared) & CSRC 













Software-Initiated! Doze Low 


LPM=01, CSRC=1 


CPM Interrupt & SCCR[PRQEN] 
CPM_ACT = CPM_ACT & CSRC Wake-Up: 3-4 GCLKx 
Clocks 
Doze High IRQx | RTC/PIT/TB/DEC 














Software-Initiated! 
: LPM=01, CSRC=0 sali 
or [(CPM_ACT & (CSRC=1)] Wake-Up: 3-4 VCOOUT Normal 
| Clocks 


High Mode 






LPM=00, 
[(CSRC=0) | 


as 1 
Software-Initiated Sleep Mode (CSRC=1) & Interrupt] 


LPM=10 





(IRQx Asserted) | RTC/PIT/TB/DEC 
Interrupt 


Wake-Up: 500 OSCCLK 
Clocks 






Deep-Sleep Mode 
LPM=11 
TEXPS=1 


Software-lInitiated! 

















Software-Initiated’ BeaseDown Mode il ae Interrupt 
Software-init2: LPM=11 and TEXPS=0 oe 
Power Failure or Power Fail by HRESET Asserted) 
or 
(HRESET Asserted Only) 
Legend: Software-lnitiated’ 
CPM_ACT = (CPM Activity) & (SCCR[CRQEN] = 1) RESET 


MSRPOW = (MSR[POW] = 0) & (SCCRIPRQEN] = 1) 





' Software is active only in normal high/low modes. 


2 maVBDSYN of power-down mode requires that the TEXP output be used by external logic to gate main power (VDDH, VDDL, 
an , 


Figure 14-13. MPC850 Low-Power Mode Flowchart 
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14.5.1 Normal High Mode 


Normal high mode is the default mode of the MPC850 . In this mode, the GCLKx 
frequency is determined by SCCR[DFNH], and all modules of the MPC850 are enabled. 
For more information about SCCR[DFNH], refer to Section 14.3.1.1, “The Internal 
General System Clocks (GCLK1C, GCLK2C, GCLK1, GCLK2). 


Normal high mode is selected if PLPRCR[CSRC]=0 and PLPRCR[LPM]=00, or if an 
enabled event has caused an exit from another low-power mode. 


14.5.2 Normal Low Mode 


Normal low mode takes advantages of the low-power dividers for GCLKx to enable full 


functionality of the MPC850 , but at a lower frequency so that power consumption is 


reduced. The low-power dividers allow the system to reduce and restore the operating 
frequencies of different sections of the MPC850 without losing the SPLL lock. This mode 
1S Sometimes referred to as slow-go or low gear mode. 


Normal low mode is selected if PLPRCR[CSRC]=1 and PLPRCR[LPM]=00. In normal 
low mode, the GCLKx frequency is determined by SCCR[DFNL]. For more information 
about SCCR[DFNL], see Section 14.3.1.1, “The Internal General System Clocks 
(GCLKIC, GCLK2C, GCLK1, GCLK2).” Note also that PLPRCR[TMIST] should be 
cleared before entering normal low mode; for more information, see Section 14.5.8, 
“TMIST: Facilitating Nesting of SIU Timer Interrupts.” 


Normal low mode can be entered at any time, and the frequency of operation of normal low 
mode can be changed dynamically. This is controlled by PLPRCR[CSRC] and 
SCCR[DFNL]. Changes to these bits take effect immediately. 


The following events cause the MPC850 to leave normal low mode and enter normal high 
mode: 


e A pending interrupt from the interrupt controller occurs. This option is maskable 
with SCCR[PRQEN]. These interrupts include all internal and external interrupt 
sources, if enabled. 


e Software-initiation, by writing MSR[POW] = 0. This option is maskable with 
SCCR[PROEN]. 


e The communications processor (CP) has a service request from a peripheral (SCC, 
SMC, etc.). This option is maskable with SCCR[CRQEN]. 


14.5.3 Doze High Mode 


When software initiates the doze high mode, software processing on the core suspends. The 
GCLKxC clocks to the core, MMUs, and caches are disabled. However, the CPM and SIU 
continue to function as normal. 


Doze high mode is_ selected if PLPRCR[CSRC]=0, MSR[POW]=1, and 
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SCCR[DFNH]. For more information about SCCR[DFNH], see Section 14.3.1.1, “The 
Internal General System Clocks (GCLK1C, GCLK2C, GCLK1, GCLK2).” Note also that 
PLPRCR[TMIST] should be cleared before entering doze high mode; for more 
information, see Section 14.5.8, “TMIST: Facilitating Nesting of SIU Timer Interrupts.” 


The MPC850 leaves doze high mode and enter normal high mode when a pending interrupt 
from the interrupt controller occurs. These interrupts include all internal and external 
interrupt sources, if enabled. This action requires that SCCR[PRQEN] be set; otherwise, 
the MPC850 will not wake up. When the MPC850 enters normal high mode, 
PLPRCR[LPM] 1s cleared. 


Upon resumption of processing in normal high or low mode, the MPC850 jumps to the 
external interrupt vector to process the interrupt source. When the core returns from the 
exception handler via rfi, it resumes processing from the instruction following that which 
initiated entry into doze mode.The one exception to this is the decrementer, a wake-up 
interrupt from the decrementer never causes a jump to the interrupt handler; instead 
processing always resumes from the instruction following that which initiated entry into 
low-power mode. | 


14.5.4 Doze Low Mode 


Doze low mode is similar to Doze high mode, except that additionally the system clock 
frequency has been reduced. In doze low mode, the GCLKx frequency is determined by 
SCCR[DFNL]. For more information about SCCR[DFNL], see Section 14.3.1.1, “The 
Internal General System Clocks (GCLK1C, GCLK2C, GCLK1, GCLK2).” 


Doze low mode is_ selected if PLPRCR[CSRC]=1, MSR[POW]=1, and 
PLPRCR[LPM]=01. Note also that PLPRCR[TMIST] should be cleared before entering 
doze low mode; for more information, see Section 14.5.8, “TMIST: Facilitating Nesting of 
SIU Timer Interrupts.” 


The MPC850 has the option to temporarily leave doze low mode and enter doze high mode 
when CPM activity occurs. This option is enabled in SCCR[CRQEN]. When the CP 
finishes servicing the peripheral request, the MPC850 automatically reenters doze low 
mode. 


The MPC850 leaves doze low mode and enter normal high mode when a pending interrupt 
from the interrupt controller occurs. These interrupts include all internal and external 
interrupt sources, if enabled. This action requires that SCCR[PRQEN] be set; otherwise, 
the MPC850 will not wake up. When the MPC8SOenters normal high or normal low mode, 
PLPRCR[LPM] is cleared. 


When the MPC850 leaves doze low mode, it enters normal high mode if SCCR[PRQEN] 
is set; otherwise it enters normal low mode. 


Upon resumption of processing in normal high or low mode, the MPC850 jumps to the 
external interrupt vector to process the interrupt source. When the core returns from the 
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exception handler via rfi, it resumes processing from the instruction following that which 
initiated entry into doze mode. The one exception to this 1s the decrementer, a wake-up 
interrupt from the decrementer never causes a jump to the interrupt handler; instead 
processing always resumes from the instruction following that which initiated entry into 
low-power mode. 


14.5.5 Sleep Mode 


In sleep mode, the only internal modules that are activated are the SIU timers, including the 
real-time clock (RTC), periodic interrupt timer (PIT), timebase (TB), and decrementer 
(DEC). | 


Sleep mode is selected if PLPRCR[LPM]=10. Only PITRTCLK and TMBCLK are active 
in sleep mode. Clocks to all other modules are disabled. Note that because the SIU memory 
controller is not activated in this mode, memory refresh does not occur. Note also that 
PLPRCR[TMIST] should be cleared before entering sleep mode; for more information, see 
Section 14.5.8, “TMIST: Facilitating Nesting of SIU Timer Interrupts.” 


The following events cause the MPC850 to leave sleep mode and enter normal high mode: 


e An external IRQx input is asserted for which wake-up capabilities are enabled. 
Wake-up capabilities for IRQx interrupts are enabled in the associated SUEL[WMx] 
bits. 


e A time-out event of the RTC, PIT, TB, or DEC occurs. 





When the MPC850 leaves sleep mode, it enters normal high or normal low mode, 
depending on the state of PLPRCR[CSRC] and SCCR[PRQEN]. When the MPC850 enters 
normal high mode, PLPRCR[LPM] ts cleared. 


Upon resumption of processing in normal high or low mode, the MPC850 jumps to the 
external interrupt vector to process the interrupt source if that interrupt is enabled in 
SIMASK and MSR[EE]. When the core returns from the exception handler via rfi, it 
resumes processing from the instruction following that which initiated entry into sleep 
mode. The one exception to this is the decrementer, a wake-up interrupt from the 
decrementer never causes a jump to the interrupt handler; instead processing always 
resumes from the instruction following that which initiated entry into low-power mode. 


14.5.6 Deep-Sleep Mode 


Deep-sleep mode is similar to sleep mode, except that the SPLL is also disabled and, 
therefore, the wake-up time from this mode is longer. Wake-up time from deep-sleep mode 
is amaximum of 500 OSCCLK clocks Gf OSCCLK is sourced by OSCM) or a maximum 
of 1000 clocks Gf OSCCLK is sourced by EXTCLK). 


Deep-sleep mode is selected if PLPRCR[LPM]=11 and PLPRCR[TEXPS]=1. Note also 
that PLPRCR[TMIST] should be cleared before entering deep-sleep mode; for more 
information, see Section 14.5.8, “TMIST: Facilitating Nesting of SIU Timer Interrupts.” 
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Note that the RTC, PIT, TB, and DEC operate in deep-sleep mode only if their timing 
reference is OSCM. In all other aspects, the behavior of deep-sleep mode is identical to that 
of sleep mode. 7 | 


14.5.7 Power-Down Mode 


Power-down mode describes the condition where a power source is applied to KAPWR, but 
the power source for VDDH, VDDL, and VDDSYN has been shut down. The behavior in 
this mode is similar to deep-sleep mode, in that the SPLL is shut down and only the 
real-time clock (RTC), periodic interrupt timer (PIT), timebase (TB), and decrementer 
(DEC) are active. The RTC, PIT, TB, and DEC operate in power-down mode only if their 
timing reference is OSCM. 


Exiting from power-down mode requires a full hardware reset. Note that if 1t is required that 
the PIT, TB, DEC, and SPLL registers and settings not change during power-down mode 
and the subsequent reset, then PORESET should be pulled high throughout power-down 
mode and HRESET should be used for the reset during wake-up. Otherwise, PORESET can 
be used for this reset source. After initial power-up, PORESET assertion does not affect the 
RTC registers. 


To maintain stability of the crystal oscillator, switchover between the main power supply 
and KAPWR supply should be done smoothly. The maximum power supply rise time seen 
at the KAPWR pin should be less than 1.7 V/ms for a 32-kHz input frequency. 


Power-down mode can be used for: 


e A software-initiated controlled shutdown, with optional automatic wakeup, 


e Maintaining integrity of the real-time clock (RTC) during a power failure. 


14.5.7.1 Software Initiation of Power-Down Mode, with Automatic 
Wake-up | | | 

Power-down mode can be initiated in software if the external TEXP signal is used to control 
the power supply for VDDH, VDDL, and VDDSYN. If software clears TEXPS, the TEXP 
signal deasserts. This signal deassertion can be used externally to shut down the VDDH, 
VDDL, and VDDSYN power supplies. In performing this operation, TEXP should be 
deasserted by setting PLPRCR[LPM]=11 and clearing PLPRCR[TEXPS] (by writing 1). 


The TEXP signal can also be used to enable automatic or externally-initiated wakeup from 
power-down mode. When the RTC, PIT, TB, or DEC generate an event, or when HRESET 
is asserted externally, PLPRCR[TEXPS] is set and the TEXP pin is asserted. TEXP can be 
externally connected to a switch that turns on the power supply to the chip, as shown in 
Figure 14-14. The MPC850 should then go through a normal hard reset sequence. When 
performing this hard reset sequence, it is important to allow enough time for the oscillator 
to warm up and the SPLL to lock. 


In this configuration, PORESET, HRESET, and SRESET should be pulled up to KAPWR, 


SRRRRRERO RE IRR eEn DONE nEEROROERDOD Ce ee teeter eee ee eeremmmee eee et memmeene nem ee tere reemeeemnmnetet re emernnrenenretemtrrrmrnmntrnresmmenen mene tenner nr nerrerentrrentes rT rrrrrtr terete rettteertreettteemreeeet eT oNe eT 


SREEEEEL ERRORS LITERATE EEE BRE ESRC RR RRR REARS PBR RAI SIR TRU AERA ARERR AAS O SRA RAN ARBRE RRR RRR RRR RRR CRORE RRR RRR SERIE OREO REAR EBERT AE EER ARSE REREAD 


14-24 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part IV. The Hardware Interface 


in order to keep them from being unintentionally sampled as asserted and causing an 
unintended exit from power-down mode. 


This scheme is shown in Figure 14-14. 





: , oW1 Main Power 
VDDSYN ; ; Supply 
| : vu 3.3V 
| l 
' Swe 
VDDH | 
I I yy, 
| l 
| OFT 
| 'SW3 
MPC850 NODE hb oO 
< 
KAPWR 


~ 


HRESET 


SRESET 





TEXP 





Figure 14-14. Software-initiated Power-down Configuration 


Switches for VDDH, VDDL, and VDDSYN are shown separately; however, if they are 
supplied from the same source, there would actually be only a single switch. When 
PLPRCR[TEXPS] is cleared, TEXP is deasserted and the power is shut down. 
PLPRCR[TEXPS], is asserted by the MPC850 when the real-time clock or timebase time 
value matches the value programmed in its associated alarm register or when the periodic 
interrupt timer or decrementer decrements their value to zero, or when the HRESET signal 
is externally asserted. 


14.5.7.2 Maintaining the Real-Time Clock (RTC) During Shutdown or 
Power Failure 

The power-down configuration can be used simply to maintain integrity of the real-time 
clock (RTC) if a power shutdown or power failure should occur. The backup KAPWR 
source is used to maintain the RTC. In this configuration, no provision is made for 
automatic wake-up from power-down mode. Instead, it is assumed that the appropriate reset 
sequence will be initiated when the power supply to VDDH, VDDL, and VDDSYN is 
reapplied. | 
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Some power monitoring circuits drive a reset signal when the power supply voltage falls 
below a specified threshold, in order to assure that erratic behavior does not occur in a 
low-voltage situation. This functionality can be used with the MPC850,while still 
maintaining integrity of the RTC. 


The reset signal from the power monitor circuit should be connected to the PORESET 
signal of the MPC850. If power dips below the threshold, PORESET is driven to the 
MPC850, which resets all of the modules of the MPC850 except the RTC. If power fails 
entirely, PORESET remains asserted, but the RTC continues to operate if a backup power 
supply (battery) is connected to KAPWR. 


In this configuration, HRESET and SRESET should be pulled up to VDDH, not to 
KAPWR. This is because assertion of PORESET causes the MPC850 to assert HRESET 
and SRESET. Pulling these signals up to KAPWR causes current to drain unnecessarily. If 
HRESET and SRESET are pulled up to VDDH and VDDH is not powered, then no current 
drain will result from the HRESET and SRESET assertion. Note also that PORESET is an 
input-only signal, and thus does not need a pull-up resistor if the power monitor circuit’s 
reset output is a constantly-driven active driver (that is, not three-state). 


14.5.7.3 Register Lock Mechanism: Protecting SIU Registers in 
Power-Down Mode 


If the MPC850 sets PLPRCR[LPM]=11 before entering power-down mode, then the 
registers of the SIU maintained by KAPWR are automatically protected. However, to 
provide protection of the SIU registers maintained by KAPWR against uncontrolled 
shutdown, a register locking mechanism is included. These registers can be write-protected 
in a set of associated key registers. For more information on the register lock mechanism, 
see Section 10.4.5, “Register Lock Mechanism.” 


14.5.8 TMIST: Facilitating Nesting of SIU Timer Interrupts 


It is often desirable, within an interrupt service routine, to clear the source of the interrupt 
at the beginning of the routine, in order to facilitate nesting of interrupts. However, if 
normal low mode is enabled, clearing an interrupt source can cause transition into normal 
low mode, which may not be desired. In order to resolve these conflicting interests, 
PLPRCR[TMIST] is provided. A timeout in the RTC, PIT, TB, or DEC will cause the 
PLPRCR[TMIST] to be set. While PLPRCR[TMIST] is set, entry into low-power mode is 
disabled. Thus, the SIU timer interrupt source can be cleared immediately in the interrupt 
service routine, while still allowing entry into low-power mode to be enabled at a later, 
user-defined time (when software clears PLPRCR[TMIST]). Note, however, this requires 
that PLPRCR[TMIST] must be cleared before entry into any low-power mode other than 
normal high mode. 


14.6 Clock and Power Control Registers 


The following sections describe the clock and power control registers. 
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14.6.1 System Clock and Reset Control Register (SCCR) 


The SPLL has a 32-bit control register that is powered by keep-alive power. The system 
clock and reset control register (SCCR) is memory-mapped into the MPC850 SIU’s register 
map. 






: (IMMR&OXFFFFO000) + 280 
(IMMR&OXFFFF0000) + 282 


Note: HRESET is hard reset and POR is power-on reset. 

# The field is undefined 

—The field is unaffected. 

* RTDIV depends on the combination of MODCK1 and MODCK2. RTSEL depends on MODCK1. See Table 14-4 for 
more information. 

T This field is set according to the default of the hard reset configuration word. 


Figure 14-15. System Clock and Reset Control Register (SCCR) 









Table 14-8. SCCR Field Descriptions 


Reserved, should be cleared. 


Clock Output Module. This field controls the output buffer strength of the CLKOUT pin. When both 
bits are set, the CLKOUT pin is held in the high state. These bits can be dynamically changed 
without generating spikes on the CLKOUT pin. If the CLKOUT pin is not connected to external 
circuits, clock output should be disabled to minimize noise and power dissipation. The COM field is 
cleared by hard reset. 

00 =Clock output enabled full-strength buffer. 

01 =Clock output enabled half-strength output buffer. 

10 =Reserved. 

11 =Clock output disabled. 


J Reserved, should be cleared. — 


Timebase Source. Determines the clock source that drives the timebase and decrementer. 
0 = Timebase frequency source is the OSCCLK divided by 4 or 16. 
1 = Timebase frequency source is GCLK2 divided by 16. 
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Table 14-8. SCCR Field Descriptions (Continued) 


od 


7 RTDIV Real-Time Clock Divide. Determines if the clock, the crystal oscillator or main clock oscillator, to the 
real-time clock and periodic interrupt timer is divided by 4 or 512. At power-on reset this bit is 
cleared if the MODCK1 and MODCkz2 signals are low. 
0 = The clock is divided by 4. 
1 = The clock is divided by 512. 
Z RTSEL 
CRQEN 
10 PRQEN 
1 =The system switches to high frequency when there is a pending interrupt from the Interrupt . 
controller or MSR[POW] = 0. 
11-12 a Reserved, should be cleared. 
13-14 | EBDF External Bus Division Factor. This field defines the frequency division factor between GCLKx and 
00 = CLKOUT is GCLK2 divided by 1. 
01 = CLKOUT is GCLK2 divided by 2. 
1x = Reserved. 
00 = Divide by 1 (normal operation). 
01 = Divide by 4. 
10 = Divide by 16. 


GCLKx_50. CLKOUT is similar to GCLK2_50. The GCLKx_50 is used by the bus interface and 
15-16 | Reserved, should be cleared. 
11 = Divide by 64. 


memory controller to interface with an external system. This field is initialized during hard reset 
17-18 |DFSYNC | Division Factor for the SYNCCLK. This field sets the VCOOUT frequency division factor for the 
SYNCCLK signal. Changing the value of this field does not result in a loss-of-lock condition. This 

















Real-Time Clock Select. Selects the crystal oscillator or main clock oscillator as the input source to 
PITRTCLK. At power-on reset, it reflects the value of MODCK1. 

0 = OSCM (crystal oscillator) is selected. 

1 = EXTCLK is selected. 





























CPM Request Enable. Cleared by power-on or hard reset. In low-power modes, specifies if the 
general system clock returns to high frequency while the CP is active. 

0 The system remains in low frequency even if the communication processor module is active. 
1 The system switches to high frequency when the communication processor module is active. 










Power Management Request Enable. In low-power modes, specifies whether the general system 
clock returns to a high frequency when a pending interrupt from the interrupt controller or 
MSR[POW/] is clear (normal mode). Cleared by power-on or hard reset. 

0 =The system remains in low frequency even if there is a pending interrupt from the interrupt 
controller or MSR[POW] = 0 (normal mode). | 























using the hard reset configuration word in Section 11.3.1.1, “Hard Reset Configuration Word.” 
field is cleared by a power-on or hard reset. 


19-20 | DFBRG 





Division Factor of the BRGCLK. This field sets the VCOOUT frequency division factor for the 
BRGCLK signal. Changing the value of this field does not result in a loss-of-lock condition. This 
field is cleared by a power-on or hard reset. 

00 = Divide by 1 (normal operation). 

01 = Divide by 4. 

10 = Divide by 16. 

11 = Divide by 64. 
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Table 14-8. SCCR Field Descriptions (Continued) 


od 


21-23 | DFNL Division factor low frequency. Sets the VCOOUT frequency division factor for general system clocks 
to be used in low-power mode. In low-power mode, the MPC850 automatically switches to the 
DFNL frequency. To select the DFNL frequency, load this field with the divide value and set the 
CSRC bit. A loss-of-lock condition will not occur when changing the value of this field. This field is 
cleared by a power-on or hard reset. 

000 = Divide by 2. 

001 = Divide by 4. . 

010 = Divide by 8. 

011 = Divide by 16. | 
100 = Divide by 32. 

101 = Divide by 64. 

110 = Reserved. 

111 = Divide by 256. 


24-26 |DFNH Division factor high frequency. Sets the VCOOUT frequency division factor for general system 
clocks to be used in normal mode. In normal mode, the MPC850 automatically switches to the 
DFNH frequency. To select the DFNH frequency, load this field with the divide value and clear 
CSRC. A loss-of-lock condition does not occur when this field is changed. This field is cleared by a 
power-on or hard reset. 

000 = Divide by 1. 
001 = Divide by 2. 
010 = Divide by 4. 
011 = Divide by 8. 
100 = Divide by 16. 
101 = Divide by 32. 
110 = Divide by 64. 
111 = Reserved. 


27-31 p= Reserved, should be cleared. 


14.6.2 PLL, Low-Power, and Reset Control Register (PLPRCR) 


The 32-bit system PLL, low-power, and reset control register (PLPRCR) is powered by a 
keep-alive power supply and is used to control the system frequency and low-power mode 
operation. 
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(IMMR&OxFFFFOOOO0) + 284 





(IMMR&OxFFFFOOOO) + 286 


a NOTE: HRESET is hard reset and POR is power-on reset. 
Depends on the combination of MODCKtand MODCk2. See Table 14-4 for more information. 


Figure 14-16. PLL, Low-Power, and Reset Control Register (PLPRCR) 
Table 14-9 described PLPRCR bits. 
Table 14-9. PLPRCR Field Descriptions 


Multiplication factor. Determines the factor by which the OSCCLK input is multiplied to produce 
VCOOUT. This field controls the value of the divider in the SPLL feedback loop. Programmable 
between 1and 4096, where 0x000 corresponds to 1 and OxFFF corresponds to 4096. 

The MF field can be read and written at any time. Changing the MF field causes the SPLL to lose its 
lock. All clocks are disabled until the SPLL reaches lock condition. 


out-of-lock indication sets the SPLSS bit and it remains set until the software clears it. At power-on 
reset, the state of the SPLSS bit is zero. Write a 1 to clear this bit (writing a zero has no effect). A 
loss-of lock is caused by a change in the MF field or the processor entering deep-sleep mode or 
power-down mode. These three conditions do not affect the SPLSS bit. 

0 =SPLL remains locked. 

1 =SPLL has gone out of lock at least once since the bit was cleared. 


Timer Expired Status. Internal status bit set when the periodic timer expires, the real-time clock 
alarm sets, the timebase clock alarm sets, the decrementer interrupt occurs, or the system resets. 
This bit is cleared by writing a 1; writing a zero has no effect. The TEXPS bit also controls the TEXP 
signal. When TEXPS is set, the TEXP external signal is asserted and when it is reset, the TEXP 
external signal is negated. 

0 = TEXP is negated. 

1 = TEXP is asserted. 


18 = Reserved, should be cleared. 
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Table 14-9. PLPRCR Field Descriptions (Continued) 


eels 


19 TMIST | Timers interrupt status. Cleared at reset. Set when a real-time clock, periodic interrupt timer, 
timebase, or decrementer interrupt occurs. This bit is cleared by writing a 1; writing a zero has no 









effect. Entry into low-power mode is disabled when TMIST is set. 
0 = No timer interrupt was detected. 
1 =A timer interrupt was detected. 


20 |= Reserved, should be cleared. 


21 SRC _ | Clock source. Specifies whether DFNH or DFNL generates the general system clock. Cleared by 
hard reset. 
0 = The general system clock is generated by the DFNH field. 
1 = The general system clock is generated by the DFNL field. 


: 
24 CSR 



















Low-power modes. This bit, in conjunction with TEXPS and CSRC, specifies the operating mode of 
the core. There are seven possible modes. In the normal modes, the user can write a non-zero value 
to this field. In the other modes, only a reset or asynchronous interrupt can clear this field. 

00 = Normal high/normal low mode. 
01 = Doze high/doze low mode. 

10 = Sleep mode. 

11 = Deep-sleep/power-down mode. 
















Checkstop reset enable. Enables an automatic reset when the processor enters checkstop mode. If 
the processor enters debug mode at reset, then reset is not generated automatically; refer to 
Table 14-10. See Section 36.5.2.2, “Debug Enable Register (DER).” 





Loss-of-lock reset enable. Enables hard reset generation when a loss-of-lock indication occurs. 
0 = A hard reset is not generated when a loss-of-lock is indicated. 
1 =A hard reset is generated when a loss-of-lock is indicated. 








Force I/O pull down. Indicates when the address and data external pins are driven by an internal 
pull-down device in sleep and deep-sleep mode. 


LOLRE 
26 FIOPD 
0 = No pull-down on the address and data bus. 
1 = Address and data bus is driven low in sleep and deep-sleep mode. 


4 Reserved, should be cleared. 


Table 14-10 describes PLPRCR[CSR] and DER[CHSTPE] bit combinations. 





Table 14-10. PLPRCR[CSR] and DER[CHSTPE] Bit Combinations 


PLPRCRICSA] | DERICHSTPE] | CheckstopMode | Result, 










a 
ee ae 


Enter debug mode 






1 


a a ae 
a ae ae 
a ee ee 
a ae aE 
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Chapter 15 
Memory Controller 


The memory controller is responsible for controlling a maximum of eight memory banks 
shared between a general-purpose chip-select machine (GPCM) and a pair of sophisticated 
user-programmable machines (UPMs). It supports a glueless interface to SRAM, EPROM, 
flash EPROM, regular DRAM devices, self-refresh DRAMs, extended data output DRAM 
devices, synchronous DRAMs, and other peripherals. This flexible memory controller 
allows the implementation of memory systems with very specific timing requirements. 





The GPCM provides interfacing for simpler, lower-performance memory resources and 
memory-mapped devices. The GPCM has inherently lower performance because it does 
not support bursting. For this reason, GPCM-controlled banks are used primarily for 
boot-loading and access to nonburstable memory-mapped peripherals. 


The UPM provides both more features and, because it supports bursting, higher 
performance. Therefore it is typically used to interface with higher-performance run-time 
memory such as DRAM and bursting SRAM. 


The UPM supports address multiplexing of the external bus, periodic timers, and 
generation of programmable control signals for row address and column address strobes to 
allow for a glueless interface to DRAM devices. The periodic timers allow refresh cycles 
to be initiated while the address MUXing provides row and column addresses. 


Different timing patterns can be generated for the control signals that govern a memory 
device. These patterns define how the external control signals behave in read-access, 
write-access, burst read-access, or burst write-access requests. Periodic timers are also 
available to periodically generate user-defined refresh cycles. 


15.1 Features 


The following is a list of the memory controller’s main features: 


e Eight memory banks 
— 32-bit address decode with mask 
— Variable block sizes (32 Kbytes to 4 Gbytes) 
— Byte parity generation/checking 
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— Write-protection capability 
— Address types protection for memory bank accesses by internal masters 
— Control signal generation machine selection on a per-bank basis 
— Support for external master access to memory banks 
— Synchronous and asynchronous external masters support 
e General-purpose chip-select machine (GPCM) 
— Compatible with SRAM, EPROM, FEPROM, and peripherals 
— Global (boot) chip-select available at system reset 
— Boot chip-select support for 8-, 16-, and 32-bit devices 
— Minimum two clock accesses to external device 
— Four byte write enable signals (WE) 
— Output enable signal (OE) 


e Two user-programmable machines 





— Programmable-array-based machine controls external signal timing with a 
granularity of one quarter of an external bus clock period 


— User-specified control-signal patterns run when an internal or external 
synchronous master requests a single-beat or burst read or write access. 


— User-specified control-signal patterns run when an external asynchronous master 
requests a single-beat read or write access. 


— UPM periodic timer runs a user-specified control signal pattern to support 
refresh 


— User-specified control-signal patterns can be initiated by software 


— Each UPM can be defined to support DRAM devices with depths of 64, 128, 256, 
and 512 Kbytes, and 1, 2,4, 8, 16, 32, 64, 128, and 256 Mbytes 


— Each UPM provides programmable timing for the following signals: 
— Four byte-select lines 
— Six external general-purpose lines 

— Supports 8-, 16-, and 32-bit DRAM port sizes 


— Glueless interface to one bank of DRAM (only external buffers are required for 
additional SIMM banks) 


— Page mode support for successive transfers within a burst for all on-chip and 
external synchronous devices 


— Internal address multiplexing for all on-chip bus masters supporting 64-, 128-, 
256-, and 512-Kbyte, and 1-, 2-, 4-, 8-, 16-, 32-, 64-, 128-, 256-Mbyte page 
banks | 


— Glueless interface to EDO, self refresh, and synchronous DRAM devices 
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Figure 15-1 is a block diagram of the memory controller. 
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Attributes 
34 SCY{0-3] 
Expired | sca ctad a 
Wait State j > WE/0-3] 
’ = OF 
TA 
BURST, R/W 
CS[0-7] 
UPM Access Request BS_x[0-3] 
UPM aes 
UPM Access Acknowledge Arbiter PLx[0-5] 
> TA 
Enable DLTS (Internal) 
UPWAITx 





Turn-On Disable Timer 
WP Error UPM Access Request (Command) 











UPM Command Done 





Memory Command Register (MCR) 


Memory Data Register (MDR) 


DP[0-3] 
| DP(0-31] | 





Parity Error 








=| Memory Status Register (MSTAT) 





Memory Address Register (MAR) 





Memory Periodic Timer Prescale 
Register (MPTPR) 


Figure 15-1. Memory Controller Block Diagram 
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15.2 Basic Architecture 
The memory controller consists of three basic machines: 

e General-purpose chip-select machine (GPCM) 

e User-programmable machine A (UPMA) 

e User-programmable machine B (UPMB) 
Each bank can be assigned to any one of these machines via the BRx[MS] bits as shown in 
Figure 15-2. Address decode is performed by the comparison of (A[0—16] bit-wise and 
ORx[AM]) with BRx[BA]. If an address match occurs in multiple banks, the lowest 


numbered bank has priority. When a memory address matches BRx[BA], the corresponding 
machine takes ownership of the external signals that control access until the cycle ends. 


UPMA 








p BankS 3 | BRIM] | 


Cums) 
Carew) 





Figure 15-2. Memory Controller Machine Selection 


The GPCM provides a glueless interface to EPROM, SRAM, flash EPROM, and other 
peripherals. GPCM signals are available on CS[0—7]. CSO lets the CPU access the boot 
EPROM from reset. Each chip-select allows up to 30 wait states. 


Some features are common to all eight memory banks: 


¢ The full 32-bit decode is available internally, even if all 32 bits are not visible outside 
of the MPC850. For external master transactions, the memory controller extends the 
26-bit external address line to 32 bits and the 6 msbs are zeros. 


¢ The block size of each memory bank can vary between 32 Kbytes and64 Mbytes for 
a total memory capacity of 512 Mbytes for a full 4 Gbytes of the address space. 


¢ MPC850Each memory bank can be selected for read-only or read/write operation. 
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e For system protection, access to a memory bank can be restricted to accesses with 
certain address type codes (AT[0—2]). For additional flexibility, address-type 
comparisons provide a mask option. 


The memory controller functionality minimizes the need for glue logic in MPC850-based 
systems. In Figure 15-3, CSO is used with the 16-bit boot EPROM with BRO[MS] 
defaulting to select the GPCM. CSI is used as the RAS signal for 32-bit DRAM with 
BRI1[MS] configured to select UPMA. The BS_A signals are used as CAS signals on the 
DRAM. 











MPC850 








GPCM 





CAS(0-3] 
W 

Data 
Parity[0-3} 











Figure 15-3. Simple System Configuration 


The UPMs provide a flexible interface to many types of memory devices. Each UPM can 
control the address multiplexing necessary to access DRAM devices, the timing of the BS 
signals, and the timing of the GPL signals. Each memory bank can be assigned to either 
UPM. 


Each UPM is a programmable RAM-based machine. The UPM toggles the memory 
controller external signals as programmed in RAM when an internal or external master 
initiates an external single-beat or burst read/write access. The UPM also controls address 
multiplexing, address increment, and transfer acknowledge assertion for each memory 
access. The UPM specifies a set of signal patterns for a user-specified number of clock 
cycles. The UPM RAM pattern run by the memory controller is selected according to the 
type of external access transacted. At every clock cycle, the logical value of the external 
signals specified in the RAM array is output on the corresponding UPM pins. See 
Figure 15-4. 
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Internal/External Memory Access Request Select 


Address (A), 


os ee 












Address 
Comparator 
Bank Select 


GPCM 





Signals 
Timing 
Generator 


Signals 
Timing 
Generator 





















External Signals 


Figure 15-4. Basic Memory Controller Operation 


15.3 Chip-Select Programming Common to the 
GPCM and UPM 


The GPCM and the UPMs use the memory controller registers as specified in Table 15-1. 
See Section 15.4, “Register Descriptions,’ for specific register information. 


Table 15-1. Memory Controller Register Usage 


- Register Used by the GPCM Used by a UPM 
Base register bank 0-7 register (BRx) | a aaa J 


Option register bank O—7 register (ORx) 


Memory status register (MSTAT) i ae 






Memory command register (MCR) 


Machine A mode register (MAMR) 


Machine B mode register (MBMR) 





Memory data register (MDR) 
Memory address register (MAR) 


Memory periodic timer prescaler register (MPTPR) 


v 
v 
v 
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15.3.1 Address Space Programming 


Each bank has an option register (ORx) and a base register (BRx), which contains a V bit 
that indicates that the information for the chip-select is valid. 


Each base register defines the starting address of its memory bank and each option register 
defines the attributes for its memory bank. Option registers also define the initial address 
multiplexing for a memory cycle controlled by a UPM. Each time an internal or external 
bus cycle access is requested, the address and its corresponding address type are compared 
to each bank. If one bank matches, its attributes defined in BRx and OR« are used to control 
the memory access. If multiple matches occur, the lowest numbered matched bank handles 
the access. 


15.3.2 Register Programming Order 


For UPM-controlled chip selects, UPM registers should be programmed before ORx and 
BRx. For all chip selects, ORx should be programmed before BRx except when 
programming the boot chip select (CSO) after hardware reset, in which case, BRO should 
be programmed before ORO. 


15.3.3 Memory Bank Write Protection 


Attempting to write to an address range marked restricted in BRx[WP] causes a 
write-protect violation for which MSTAT[WPER] is set. 


15.3.4 Address Type Protection 


BRx[AT] and ORx[ATM] can be used to implement address-type protection in a manner 
similar to the address space programming. Note that when external masters access memory 
controller-managed slaves on the bus, the internal AT[0—2] signals to the memory controller 
are forced to 0b100. 


15.3.5 8-, 16-, and 32-Bit Port Size Configuration 


The port size is specified by BRx[PS]. Eight-bit ports must be connected to D[O-7], 16-bit 
ports must be connected to D[O—15]. For ports smaller than 32-bits, dynamic bus sizing is 
performed for all internal masters, such that only external bus accesses result, such as those 
defined in Table 15-2. 


Table 15-2. Access Granularities for Predefined Port Sizes 


| Even | Boundaries) 









Predefined 
Port Size 


ee a ee 











v v 
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15.3.6 Parity Configuration | | 


If BRx[PARE] is set, parity is generated and checked (for internal masters only) on a 
per-byte basis using DP[0—3] for the bank. As described in Section 10.4.2, “SIU Module 
Configuration Register (SIUMCR),’ SIUMCR[OPAR] determines the type of parity. Any 
parity error causes TEA to be asserted and the associated MSTAT[PER] and the 
corresponding DPB or IPB bit in the transfer error status register (TESR) to be set, as 
described in Section 10.4.4, “Transfer Error Status Register (TESR).” 





15.3.7 Memory Bank Protection Status 


The memory controller status register (MSTAT) reports write-protect violations and parity 
errors for all eight banks. This protection provided through BRx[WP], is intended for 
detection of erroneous accesses made by DMA from peripherals. More sophisticated 
protection is provided for accesses from the core by the MMU, as described in Chapter 8, 
“Memory Management Unit.” 


15.3.8 UPM-Specific Registers 


The machine x mode registers (MxMR) define most of the global features for UPMs. The 
memory command and memory data registers (MCR and MDR) are used to initialize the 
UPM’s RAM array. The memory address register (MAR) specifies the address to be driven 
on the external bus when a UPM pattern is software-initiated by issuing a RUN command in 
the MCR. | 


The memory command and memory data registers (MCR and MDR) are used to initialize 
the UPM’s RAM array. The memory address register (MAR) specifies the location in the 
RAM array to be executed as defined by the MCR. Optionally, it allows a specific address 
pattern to be output onto A[6—31]. The memory periodic timer prescaler register (MPTPR) 
defines the divisor of the BRGCLK used as the memory periodic timer input. 


The memory periodic timer prescaler register (MPTPR) defines the divisor of the external 
bus clock used as the memory periodic timer input. 


15.3.9 GPCM-Specific Registers 


There are no GPCM-specific registers. All GPCM characteristics are defined in the 
subfields of individual BRx and ORx registers. 


15.4 Register Descriptions 


The following sections describe the registers used by the memory controller. 


15.4.1 Base Registers (BRx) 


The base registers (BRO—BR7) contain the base address and address types that the memory 
controller uses to compare the value on the address bus with the current address accessed. 
It also includes a memory attribute and selects the machine for memory operation handling. 
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Figure 15-5 shows the BRx register. 


0000_0000_0000_0000 


(IMMR & FFFFOO000) + 0x100 (BRO), 0x0x108 (BR1), 0x110, (BR2), 0x118 (BR3), 0x120 (BR4), 0x128 
(BR5), 0x130 (BR6), 0x138 (BR7) 


1 pane}we| ms | LY 
0000_0000_0000_0000 


(IMMR & FFFF0000) + 0x102 (BRO), 0x10A (BR1), 0x112, (BR2), 0x11A (BR3), 0x122 (BR4), 0x12A 
(BR5), 0x132 (BR6), 0x13A (BR7) 


Figure 15-5. Base Registers (BRx) 





After reset, BRO has different default values than other BRx registers until the first write to 
ORO. | 


0000_0000_0000_0000 
(IMMR & FFFFOOOO) + 0x100 





* This value depends on the boot disable (BDIS) field of the hard reset configuration word. 


Figure 15-6. BRO Reset Defaults 
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Table 15-3 describes BRx fields. 
Table 15-3. BRx Field Descriptions 


Ed 


Base address. Compared to A[0O—16]to determine if a memory bank controlled by the memory 


controller is being accessed by an internal or external bus master. Used in conjunction with ORx[AM]. 


17-19 | AT Address type. Can be used to limit accesses to the memory bank to a certain address space type, 
AT[0-2]. Note that for internal bus masters, AT[O—2] are sampled from the bus. For external bus 
masters, AT[0—2] are not sampled on the external bus and instead default to 0b100. Used in 
conjunction with the ORx[ATM]. 


20-21)PS Port size. Specifies the port size of the memory region. After system reset, the value of BRO[PS] 
depends on BPS in the hard reset configuration word, described in Section 11.3.1.1. 
00 32-bit port size. 
01 8-bit port size. 
10 16-bit port size. 
11 Reserved. . 


PARE j Parity enable. Used to enable parity checking on this bank. 
0 Parity checking is disabled. | 
1 Parity checking is enabled. 


set. The write access is not terminated by the memory controller; however, it is terminated by a TEA 
assertion from the bus monitor if the bus monitor is enabled. 


24-25 Machine select. Selects the machine for handling memory operations. 
00 GPCM. 
01 Reserved. 
10 UPMA. 
11 UPMB. | 


el Reserved, should be cleared. 


Valid. Indicates that the contents of the BRx and ORx are valid. The reset value of BRO[V] depends on 
BDIS in the hard reset configuration word, described in Section 11.3.1.1. 
0 This bank is invalid. An attempt to access this region can cause a bus monitor timeout. 


1 This bank is valid. The CS signal does not assert until V is set. 


Write-protect. Can be used to restrict write accesses within the address range of a BR. 

0 Both read and write accesses are allowed. | 

1 Only read accesses are allowed. The memory controller does not assert CSx and TA on write 
‘eyes to this memory bank. Attempting to write to the memory bank causes MSTAT[WPER] to be 


15.4.2 Option Registers (ORx) 


The option registers (ORO—-OR7), shown in Figure 15-7, contain the address and address 
type mask bit for address bus comparison. It also includes all GPCM parameters. 
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0000_0000_0000_0000 


(IMMR & FFFFO000) + 0x104 (ORO), 0x10C (OR1), 0x114 (OR2), 0x11C (OR3), 0x124 (OR4), 0x12C 
(ORS), 0x134 (OR6), 0x13C (OR7) 


AM| ATM |CSNT/SAM SCY SETA | 
(IMMR & FFFFO000) + 0x106 
Figure 15-7. Option Registers (ORx) 





ORO has separate default values and is read-only, as shown in Figure 15-7. 








0000_0000_0000_0000 


(IMMR & FEFFO000) + 0x104 (ORO), 0x10C (OR1), 0x114 (OR2), 0x11C (OR3), 0x124 (OR4), 0x12C 
(ORS), 0x134 (OR6), 0x13C (OR7) 


pope fs | » [sf mm [ol[+[o 


Figure 15-8. ORO Reset Defaults 
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Table 15-4 describes ORx fields. 
Table 15-4. ORx Field Descriptions 


Address mask. This read/write field independently masks bits A[O—16] on the address bus so 
external devices of different size address ranges can be used. AM bits can be set or cleared in any 
order, allowing a resource to reside in more than one area of the address map. 

0 The corresponding address bit is masked. 

1 The corresponding address bit is used in address pin comparison. 


Address type mask. Masks certain bits in address type, AT[O—2], allowing more than one address 
space type to be assigned to a chip-select. Any set bit causes the corresponding address type code 
bits to be used as part of the address comparison. Any cleared bit masks the corresponding address 
type code bit. If address-type protection is not desired, then ATM should be cleared. 


CSNT (chip-select negation time). Used for the GPCM with ACS and TRLX to control negation of 
CSx and WEx during an external memory write access. Provides extended address/data hold time 
for slower memories and peripherals. See Table 15-11. 


Start address multiplex. Used for a UPM to determine the address output on the first cycle of an 

external memory access. Should be set only if address multiplexing is to be performed internally. 

0 Address pins are not multiplexed internally. | 

1 Address pins reflect the address requested by the internal master multiplexed according to the 
setting of MAMR[AMA] (UPMA) or MBMR[AMB] (UPMB). 


ACS (address to chip-select setup). Lets the GPCM control CSx assertion relative to address lines 
valid. 

00 CS is output at the same time as the address lines. 

01 Reserved. | 

10 CS is output a quarter of a clock after the address lines. 

11 CS is output half a clock after the address lines. 


G5LA and G5LS (general-purpose line 5 A/line 5 start) are used for the UPM to determine how the 
internal controls and timing generator signal outputs GPL5 when a UPM handles a memory access. 
G5LA (valid only for UPMB): 

0 Output the internal GPL5 signal on GPL_B5. 

1 Output the internal GPL5 signal on GPL_AS5. 


G5LS (valid for UPMA or UPMB) 
0 GPL5 is driven low on the falling edge of GCLK1_50 in the first clock cycle of a memory access. 
1 GPLS5 is driven high on the falling edge of GCLK1_50 in the first clock cycle of a memory access. 


Burst inhibit. Determines whether this memory bank supports burst accesses. If the machine 
selected to handle this access is the GPCM, BIH must be set. 

0 BI is negated. The bank supports burst accesses. 

1 Bl is asserted. The bank does not support burst accesses. 


Select cycle length (GPCM only). Binary representation of the number of wait states inserted in the 
cycle when the GPCM handles an external memory access (0000 = 0 clock cycle, 0001 = 1 clock 
cycle, ..., 1111 = 15 clock cycle). Total cycle length is also affected by TRLX. See Table 15-11 for the 
total number of cycles. If external TA response is selected (SETA = 1), SCY is not used. 


Select external transfer acknowledge (GPCM only). 

0 Internal or external transfer acknowledge can acknowledge this access, whichever comes first. 

1 The memory controller does not generate TA for this bank; instead the peripheral must generate it 
on the external TA signal. 
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Table 15-4. ORx Field Descriptions (Continued) 


eel em 


29 TRLX | Timing relaxed (GPCM only) 
0 Timing is not relaxed. 
1 In addition to the timing parameters programmed in other ORx fields, timing is further relaxed. See 
the effect of TRLX in Table 15-11. TRLX also doubles the wait-states programmed in SCY. 


30 EHTR | Extended hold time on read. (GPCM only) 
0 Timing is defined by the memory controller. 
1 After a read from the current bank, an additional clock cycle is inserted before the memory 
controller responds to a write or read to another bank. 


st = | Reserved, should be cleared. 


15.4.3 Memory Status Register (MSTAT) 


The memory status register (MSTAT) reports parity and write-protect errors encountered 
during an external bus access initiated by the memory controller. Writing ones to specific 
bits clears them; writing zeros has no effect. 





R/W 
(IMMR & FFFFO000) + 0x178 
Figure 15-9. Memory Status Register (MSTAT) 


0000_0000_0000_0000 





Table 15-5 describes MSTAT fields. 
Table 15-5. MSTAT Field Descriptions 


a) 


0-7 |PERx_ | Parity error bank 0-7. Set when a parity error is detected during a read cycle to this bank initiated 
by the memory controller. 


WPER | Write-protection error. Set when a write-protect error occurs on a write cycle to a write-protected 
bank defined by BRx[WP]. 


15 |— | Reserved, should be cleared. 


15.4.4 Machine A Mode Register/Machine B Mode Registers (MxMR) 


The machine x mode register (MAMR and MBMR) contain the configuration for UPMA 
and UPMB, respectively. See Figure 15-1. 
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P90 [00 0000 
(IMMR & FFFFOO00) + 0x172 
Figure 15-10. Machine A Mode Register/Machine B Mode Registers (MxMR) 














Table 15-6 describes bits for MAMR/MBMR. 
Table 15-6. MxMR Field Descriptions 


ee 


Periodic timer x period. Affects periodic timer x and determines the timer period service rate 
according to the following equation, which determines value for UPMx to refresh memory: 


System Clock (MHz) x Service Duration (us) 


ne 2 x SCCR[DFBRG 
2 |. Prescaler (PTP) x NCS 


NCS is an integer between 1 and 8 that represents the number of enabled chip selects that are 
serviced by this UPM. SCCR[DFBRG] is defined in Section 14.6.1, “System Clock and Reset 
Control Register (SCCR).” For example, for DRAM to maintain data integrity, an access or 
refresh must occur every 15.6 us. Given a 25-MHz system clock with the required service rate of 
15.6 us, a periodic timer prescaler = 32, and DFBRG = 0, PTx = (25 x 15.6) / (22%0 32x 1) = 


Periodic timer x enable. Allows the periodic timer x to request service. 
0 Periodic timer x is disabled. 
1 Periodic timer x is enabled. 


Address multiplex size x. When internal address multiplexing is used, this field specifies how the 
address on the external bus is multiplexed, when enabled (see Table 15-18). The SAM bit 
enables address multiplexing in the first clock cycle. The AMx field of the RAM array entry 
enables address multiplexing in subsequent clock cycles. (see Table 15-19). 


Disable timer period. Guarantees a minimum time between accesses to the same memory bank 
if it is controlled by the UPMx. This function can be used to guarantee a minimum RAS 
precharge time. The TODT bit in the RAM array turns on the disable timer and, when expired, 
the UPMx allows the machine access to issue a memory pattern to the same region. An access 
attempted before the timer expires (as signalled by TS assertion) has wait states inserted before 
the UPM pattern runs. Accesses to other chip-selects serviced by this UPM are unaffected by 
this timer. The maximum disable period is four clock cycles. If more than 4 cycles are required, 
they must be added explicitly in the UPM RAM words. 

00 1-cycle disable period 

01 2-cycle disable period 

10 3-cycle disable period 

11 4-cycle disable period 
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Table 15-6. MxMR Field Descriptions (Continued) 


fem [mee [tm 
5 fo Reserved, should be cleared. 


16-18 | GOCLx[0—2] | General line 0 control x. Selects the address line output to the internal GPLO signal in the 

special case where the functionality is enabled in the GOL and GOH bits of the UPM RAM word. 

000 = A12 100 = A8 

001 =A11 101 =A7 

010 = A10 110 =A6 

011 =A9 111 = A5 
GPLx4DIS__| GPLx4 output line disable. Determines whether UPWAITx/GPL_x4 behaves as the GPL4 output 

2 


controlled the UPM RAM word, or an input signal used to dynamically insert wait states into 
UPM patterns. 
0 = UPWAITx/GPL_x4 is defined as GPL_x4. 
7 
- 


1 = UPWAITx/GPL_x4 is defined as UPWAITx. 
15.4.5 Memory Command Register (MCR) 
The memory command register (MCR) is used during UPM initialization to read and write 
the contents of the UPM RAM. It also allows commands to be issued that stimulate UPM 
routine execution. This capability lets the CPU perform special memory operations in 


addition to standard read/write and periodic timer service operations. An example of this is 
software execution of a special UPM pattern to initialize SDRAM. 








































Read loop field x. Specifies (in binary) the number of times a loop defined in the UPMx RAM 
word is executed for a burst read or single-beat read cycle. (0001 = 1 time, 0010 = 2 times, ..., 
1111 = 15 times; note that 0000 = 16 times.) 








Write loop field x. Specifies the number of times a loop defined in the UPMx RAM word is 
executed for a burst- or single-beat write cycle. (0001 = 1 time, 0010 = 2 times, .... 1111 =15 
times; note that 0000 = 16 times.) 













Timer loop field x. Specifies the number of times a loop defined in the UPMx RAM word is 
executed for a periodic timer service. (0001 = 1 time, 0010 = 2 times, ..., 1111 = 15 times; note 
that 0000 = 16 times.) 


Pw | ee 


Figure 15-11. Memory Command Register (MCR) 
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Table 15-7 describes MCR fields. 
Table 15-7. MCR Field Descriptions 


0 


0-1 Command opcode. Defines the operation to be executed by the UPM specified in the UM field. 

| 00 write writes the contents of the MDR into the RAM location indexed by MCR[MAD]. 
01 READ reads the contents of the RAM location indexed by MCR[MAD] and stores it in the MDR. 
10 RUN executes the pattern in the RAM array beginning with the RAM word indexed by MCR[MAD] 








on the memory bank specified in MCR[MB]. The AMX bits of the UPM RAM word in this 
software-initiated pattern must all be set to 0b11. Thus, the address for this pattern is the value 
written to MAR. The data bus is not driven. 

11 Reserved. 


2-7 |- | Reserved, should be cleared. 


aa User machine. Selects the UPM for this command. 


0 UPMA 
1UPMB 

15 |- Reserved, should be cleared. 

16-18 ae Memory bank. Indicates the appropriate CSx pin when a run command is executed (000 















corresponds to CSO, 001 corresponds to CS1, ..., 111 corresponds to CS7) 


49 f= Reserved, should be cleared. | | 


20-23 |MCLF }Memory command loop field. Specifies how many times a loop is executed for a RUN Command. 
(0001 = the loop executes once, 0010 = the loop executes twice, ..., 1111 =the loop executes 15 












times. Note that 0000 = the loop executes 16 times.) , 


24-25 | Reserved, should be cleared. 
26-31 Memory array index. Specifies an index to one of 64 RAM words in the RAM array. 





15.4.6 Memory Data Register (MDR) 


The memory data register (MDR) contains data written to or read from the RAM array for 
UPM READ or WRITE commands. MDR must be set up before issuing a WRITE command to 
the MCR. 








| 0000_0000_0000_0000 


rrr eee 
~ (IMMR & FFFFOOOO) + 0x17C | 












0000_0000_0000_0000 


R/W 
: (IMMR & FFFFOOOO) + 0x17E 


Figure 15-12. Memory Data Register (MDR) 
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Table 15-8 describes MDR. 


Table 15-8. MDR Field Descriptions 
on 
et ee a! 


Memory data. Contains the RAM array word. 


15.4.7 Memory Address Register (MAR) 


The memory address register contains an address to be driven on the external bus in the case 
of a RUN command issued to the MCR. 


















0000_0000_0000_0000 


R/W 
(IMMR & FFFFOOOO) + 0x164 


Figure 15-13. once Address Register (MAR) 





Table 15-9 describes MAR fields. 
Table 15-9. MAR Field Description 


a 





Contains a 32-bit address to be output on the address bus if AMX = 0b11. See Section 15.6.4.1, “RAM 
Words.” 


15.4.8 Memory Periodic Timer Prescaler Register (MPTPR) 


The memory periodic timer prescaler register (MPTPR) defines the divisor of the external 
bus clock used as the memory periodic timer input clock. See Section 14.3, “Clock 
Signals.” 


0000_001x 0000_0000 
2 (IMMR & FFFFO000) + 0x17A 


Figure 15-14. Memory Periodic Timer Prescaler Register (MPTPR) 
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Table 15-10 describes MPTPR fields. 
Table 15-10. MPTPR Field Descriptions 














sd 
0000 0001 Divide by 64. 


0-7 PTP Periodic timers prescaler. Contains the division factor defined below. 
001x xxxx Divide by 2. 
0001 xxxx Divide by 4. 
All other values are reserved. 
fs [= [fener stouaesewes 
15.5 General-Purpose Chip-Select Machine (GPCM) 


0000 1xxx Divide by 8. 

0000 01xx Divide by 16. 
0000 001x Divide by 32. 

The GPCM allows a glueless and flexible interface between the MPC850, SRAM, EPROM, 

FEPROM, ROM devices, and external peripherals. The GPCM contains three basic 

configuration register groups— BRx, ORx, and MSTAT. 





The GPCM provides a CS signal for memory bank activation, WE signals for write cycles 
for each byte written to memory, and OE signals for read cycles. Figure 15-15 shows a 
simple connection between an SRAM device and the MPC850. 


MPC850 32-Bit Wide SRAM 


CSx 
WE[0-3] 
GPL_x1/OE 








A[15-29] 
D{0-31] 





Figure 15-15. GPCM-to-SRAM Configuration 


15.5.1 Timing Configuration 


If BRx[MS] selects the GPCM, the attributes for the memory cycle are taken from ORx. 
These attributes include the CSNT, ACS[0—1], SCY[0—3], TRLX, EHTR, and SETA fields. 
See Table 15-11 for signal behavior and system response. 
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Table 15-11. GPCM Strobe Signal Behavior 


Option Register Attributes Signal Behavior 
Address to CS CS Negated to WE Negated to 
a Address/Data Invalid | Address/Data Invalid | '°*! Cycles 


a 
we pe] © | wees | woea [asor 


Ld 
is 
ae 
Eo 
i ae 
ce ee 
ow 
ae 
7 






-| 
Ps) 
rr 
>< 


= [a 


B)R| 












DD 
@O 
seh) 
oe 


1 SCY is the number of wait cycles from the option register. 


wD 


E 


(1+1/4)*Clock 1+1/2*Clock 1+1/2*Clock 


Write (1+1/2)*Clock 1+1/2*Clock 1+1/2*Clock 





D 
@ 
pe) 
oe 


<s\/s|<s 
= 





15.5.1.1 Chip-Select Assertion Timing 
The banks selected by the GPCM support an option to output CS at different timings with 


respect to the external address bus. Depending on the value of the ACS field (plus an 
additional cycle if TRLX = 1), CS can be output as follows 

e Simultaneous with the external address 

e One quarter of a clock cycle later 

e One half of a clock cycle later 
Figure 15-16 shows a basic connection between the MPC850 and an external peripheral 


device. Here, CS (the strobe output for the memory access) is connected directly to CE of 
the memory device and R/W is connected to the respective R/W in the peripheral device. 
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MPC850 "4 Peripheral 





Address Address 
Cs CE 








R/W R/W 


Figure 15-16. GPCM Peripheral Device Interface 


Figure 15-17 shows CS as defined by the setup time required between the address lines and 
CE. The user can configure ORx[ACS] to specify CS to meet this requirement. 


Clock | | | | | | | 


Address 











Data ——______{ . Sa 
Figure 15-17. GPCM Peripheral Device Basic Timing (ACS = 1x and TRLX = 0) 


15.5.1.2 Chip-Select and Write Enable Deassertion Timing 


Figure 15-18 shows a basic connection between the MPC850 and a static memory device. 
Here, CS is connected directly to CE of the memory device. The WE signals are connected 
to the respective W signal in the memory device where each WE corresponds to a different 
data byte. 
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MPC850 MEMORY 














Figure 15-18. GPCM Memory Device Interface 


As Figure 15-20 shows, the timing for CS is the same as for the address lines. The strobes 
for the transaction are supplied by OE or WE, depending on the transaction direction (read 
or write). ORx[CSNT] controls the timing for the appropriate strobe negation in write 
cycles. When this attribute is asserted, the strobe is negated one quarter of a clock before 
the normal case. For example, when ACS = 00 and CSNT = 1, WE is negated one quarter 
of a clock earlier, as shown in Figure 15-19. When ACS = 00 and CSNT = 1, WE and CS 
are negated one quarter of a clock earlier, as shown in Figure 15-20. 


Clock | | | | | | | 














| | | | 
l | 
| 
l 
_— | 
TS | \ | / | 
| 
| | | l 
TA a a. see a 
l 
| ] | 
| | | 
aa i \ / 
CS | | l | 
) CSNT = 1 
WE | i\ / / 
| 
l | 
l 
OE | \ / | 
| | ] 
| | | | 
] 





| 
2 eee aap ID eer 


Figure 15-19. GPCM Memory Device Basic Timing (ACS = 00, CSNT = 1, TRLX = 0) 
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Clock | | | | | | | | 














| | | 

) | | 

TS : | 

| | | 
ae acs=11 | \ / ! 
, ACS =10 | | 
CS ! 
| " CSNT=1 | | 
| : ) | 


Figure 15-20. GPCM Memory Device Basic Timing (ACS =~ 00, CSNT = 1, TRLX = 0) 
15.5.1.3 Relaxed Timing 


ORx[TRLX] is provided for memory systems that require more relaxed timing between 
signals. When TRLX = 1 and ACS = 00, an additional cycle between the address and 
strobes is inserted by the MPC850 memory controller. See Figure 15-21 and Figure 15-22. 


Clock | | | | | | | | | | | | | 





























| | | | | | l 
| 
| | 
| | | | | | 

—. 
TS | | | | 
| | | l | | 
| | | ] 
TA ) /ACS=10 | A | 
| ACS = 11 
| l l 
GS Nl an a ! ] | 
| | | | | | 
] | ] | | 
R/W , ) 
| | 
We / | l \ 
; | l 
| | l (b 
] 
Sr oe 
| | 
| | | | l | 


ee 
Figure 15-21. GPCM Relaxed Timing Read (ACS = 1x, SCY = 1, CSNT = 0, and 
TRLX = 1) 
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Clock | | | | | | | | | 
| 
| 











WE | 
pe res 











| 
reer cee: ED 


Figure 15-22. GPCM Relaxed-Timing Write (ACS = 1x, SCY = 0, CSNT = 0, TRLX = 1) 


When TRLX and CSNT are set in a write-memory access, the strobe line, WE is negated 
one clock earlier than in the normal case. If ACS = 0, CS is also negated one clock earlier, 
as shown in Figure 15-23 and Figure 15-24. When a bank is selected to operate with 
external transfer acknowledge (SETA and TRLX = 1), the memory controller does not 
support external devices that provide TA to complete the transfer with zero wait states. The 
minimum access duration in this case is 3 clock cycles. 
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Clock | | | | | | | | | | | | 
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Figure 15-23. GPCM Relaxed-Timing Write (ACS = 1x, SCY = 0, CSNT = 1, TRLX =1) 
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15.5.1.4 Output Enable (OE) Timing 


The timing of the OE is affected only by TRLX. It always asserts and negates on the rising 
or falling edge of the external bus clock. OE always asserts on the rising clock edge after 
CS is asserted, and therefore its assertion can be delayed (along with the assertion of CS) 
by programming TRLX = 1. OE deasserts on the rising clock edge coinciding with or 
immediately following CS deassertion. 


15.5.1.5 Programmable Wait State Configuration 

The GPCM supports internal TA generation. It allows fast accesses to external memory 
through an internal bus master or a maximum 17-clock access by programming ORx[SCY]. 
The internal TA generation mode is enabled if ORx[SETA] is cleared. If TA is asserted 
externally at least two clock cycles before the wait state counter has expired, the current 
memory cycle is terminated. When TRLX is set, the number of wait states inserted by the 
memory controller is defined by 2 x SCY or a maximum of 30 wait states. 


15.5.1.6 Extended Hold Time on Read Accesses 


Slow memory devices that take a long time to turn off their data bus drivers on read accesses 
should set ORx[EHTR]. Any MPC850 access to the external bus following a read access to 
the slower memory bank is delayed by one clock cycle, unless it is a read access to the same 
bank. See Figure 15-25 through Figure 15-28 for details. 


Clock | | | | | | | | | | | 
Address {XX 
{ 

















Hold Time 





Figure 15-25. GPCM Read Followed by Write (EHTR = 0) 
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Clock | | | | | | | | | | | 
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——e HoldTime ~«—— 


Figure 15-28. GPCM Read Followed by Read from Same Bank (EHTR = 1) 


15.5.2 Boot Chip-Select Operation 


Boot chip-select operation allows address decoding for a boot ROM before system 
initialization occurs. The CSO signal is the boot chip-select output and its operation differs 
from the other external chip-select outputs on system reset. When the MPC850 internal 
core begins accessing memory at system reset, CSO is asserted for every address, unless an 
internal register is accessed. 


The boot chip-select provides a programmable port size during system reset by using the 
BPS field of the hard reset configuration word described in Section 11.3.1.1. Setting these 
appropriately allows a boot ROM to be located anywhere in the address space. The boot 
chip-select does not provide write protection and responds to all address types. CSO 
operates this way until the first write to ORO and it can be used as any other chip-select 
register once the preferred address range is loaded into BRO. After the first write to ORO, 
the boot chip-select can only be restarted on hardware reset. The initial values of the boot 
bank in the memory controller are described in Table 15-12. 
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Table 15-12. Boot Bank Field Values after Reset. 


od 
W 
V 






From hard reset configuration word 
PARE 


MS[O—1 1] 
vt From hard reset configuration word 


: 
aoa fe 
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Oe 
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EC 
ene 


15.5.3 External Asynchronous Master Support 


Figure 15-29 shows the basic interface between an asynchronous external master and th 
GPCM to allow connection to static RAM. | 


ASYNCHRONOUS EXTERNAL MASTER 


TA AS Address Data 





MPC850 












Figure 15-29. Asynchronous External Master Configuration for GPCM-Handled 
Memory Devices 


Figure 15-30 shows the timing for TRLX = 0 when an external asynchronous master 
accesses SRAM. TA, WE, and OE remain asserted until the external master negates AS, at 
which point they deassert asynchronously. 
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Clock 


Address 




















Data 


Figure 15-30. Asynchronous External Master, GPCM-Handled Memory Access 
Timing (TRLX = 0) 


When an external asynchronous master performs accesses a memory device via the GPCM 
in the memory controller, ORx[{CSNT] has no effect. 


For a comprehensive discussion of external master interfacing, see Section 15.8, “External 
Master Support.” 


15.5.4 Special Case: Bursting with External Transfer Acknowledge: 


The memory controller supports bursting to and from an external slave that supplies its own 
TA termination signal in the following special case: 


The GPCM is the subsystem of the memory controller that supports provision of chip-select 
signals (CSx) for slaves that provide their TA signal external to the MPC850 (ORx[SETA] 
= 1). However, the GPCM keeps its chip-select asserted only until the first TA is sampled. 


The GPCM cannot be used to burst to an external device the requires that the chip-select 
signal remain asserted throughout a burst transaction. However, if the device requires only 
that the chip-select be asserted up to the first data beat of the burst, it is possible to burst to 
this device. The user can program ORx[SETA] = 1 and ORx[BIH] = 0 to enable this 
operation. This is the only case in which it is valid to program ORx[BIH] = 0 for a 
chip-select controlled by the GPCM. 


During a burst cycle, the user sees the chip-select assertion follow the same pattern as for a 
single-beat cycle. However, BI remains negated, and the burst continues for the following 
data beats after the negation of chip-select following TA for the first data beat. 
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Note also the following: 


e Address incrementing is not provided in this mode. Addresses driven by the 
MPC850 remain the same throughout the cycle. 


¢ The external slave must provide TA for all beats of the burst. 


15.6 User-Programmable Machines (UPMs) 


The two user-programmable machines (UPMs) are flexible interfaces that connect to a wide 
range of memory devices. At the heart of each UPM is an internal-memory RAM array that 
specifies the logical value driven on the external memory controller pins for a given clock 
cycle. Each word in the RAM array provides bits that allow a memory access to be 
controlled with a resolution of one quarter of the external bus clock period on the 
byte-select and chip-select lines. Figure 15-31 shows the basic operation of each UPM. The 
following events initiate a UPM cycle: 


e Any internal or external master requests an external memory access to an address 
space mapped to a chip-select serviced by the UPM 

e A UPM periodic timer expires and requests a transaction, such as a DRAM refresh 

¢ A transfer error or reset generates an exception request 

e The MCR receives a RUN command from the CPU 


Internal/External 
Memory Access Request 


UPM Periodic A 
Timer Request ray Index 
: Index RAM Array 
MCR RUN command Generator 


(issued in software) 


Exception Request 





Increment 
Index ety ae 
Hold (LAST = 0) nterna ignals 


UPWAIT Signals Timing 





Latch Generator 





WAEN Bit react etd eB 





Internal Controls 
Figure 15-31. User-Programmable Machine Block Diagram 


The RAM array contains 64 32-bit RAM words. The signal timing generator loads the 
RAM word from the RAM array to drive the general-purpose lines, byte-selects, and 
chip-selects. If the UPM reads a RAM word with WAEN set, the external UPWAIT signal 
is sampled and synchronized by the memory controller and the current request is frozen (if 
and while UPWAIT remains asserted). 
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15.6.1 Requests 


An internal or external master’s request for a memory access initiates one of the following 
patterns: 


e Read single-beat pattern (RSS) 
e Read burst cycle pattern (RBS) 
e Write single-beat pattern (WSS) 
e Write burst cycle pattern (WBS) 


These patterns are described in Section 15.6.1.1, “Internal/External Memory Access 
Requests.” 


A UPM periodic timer request pattern initiates a periodic timer pattern (PTS), as described 
in Section 15.6.1.2, “UPM Periodic Timer Requests.” 


An exception (reset or machine check triggered by the assertion of TEA) occurring while 
another UPM pattern is running initiates an exception condition pattern (EXS). 


A special pattern in the RAM array is associated with each of these cycle types. 
Figure 15-32 shows the start addresses of these patterns in the UPM RAM, according to 
cycle type. MCR-initiated RUN commands, however, can initiate patterns starting at any of 
the 64 UPM RAM words. 


Array Index 
Generator RAM Array 





Read Single-Beat Request 





Read Burst Request 

















Write Single-Beat Request 64 RAM 
Words 
Write Burst Request 
Periodic Timer Request 
Exception Condition Request 
ees a 


Figure 15-32. RAM Array Indexing 


15.6.1.1 Internal/External Memory Access Requests 

When an internal master requests a new access to external memory, the address and type of 
transfer are compared to each valid bank defined in BRx. The value in BRx[MS] selects the 
UPM to handle the memory access. The user must ensure that the UPM 1s appropriately 
initialized before a request. 
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External memory access requests are single-beat and burst reads and writes. A single-beat 
transfer transfers one operand consisting of a single byte, half word, or word. A burst 
transfer transfers four words. A single-beat cycle starts with one transfer start and ends with 
one transfer acknowledge. For 32-bit accesses, the burst cycle starts with one transfer start 
but ends after four transfer acknowledges. A 16-bit bus requires 8 transfer acknowledges; 
an 8-bit bus requires 16. 


15.6.1.2 UPM Periodic Timer Requests 


Each UPM contains a periodic timer that can be programmed to generate periodic service 
requests of a particular pattern in the RAM array. Figure 15-33 shows the hardware 
associated with memory periodic timer request generation. In general, the periodic timer is 
used for refresh cycle operation. MxMR[PT x] defines the period for the timers associated 
with UPMx. If MxMR[PTxE] is set, the periodic timer of UPMx requests a transaction 
when the timer period expires. 





































Periodic 
BRG . UPMA Periodic 
| Timer A ; 
System Clock Bieacxierand sees (PTA) Timer Request 
External Bus Peri ry 
Clock erodic 
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In MPTPR iodi 
( ) iahioees UPMB Periodic 


(PTB) Timer Request 


Figure 15-33. Memory Periodic Timer Request Block Diagram 


15.6.1.3 Software Requests—MCR RUN Command 


Software can start a request to the UPM by issuing a RUN command to the MCR. Some 
memory devices have their own signal handshaking protocol to put them into special 
modes, such as self-refresh mode. Other memory devices must be issued special commands 
on their control signals, such as for SDRAM initialization. 


For these special cycles, the user creates a special RAM pattern that can be stored in any 
unused areas in the UPM RAM. Then the MCR RUN command is used to run the cycle. The 
UPM runs the pattern beginning at the specified RAM location until it encounters a RAM 
word with its LAST bit set. 


15.6.1.4 Exception Requests 


When the MPC850 under UPM control initiates an access to a memory device, the external 
device may assert TEA, SRESET, or HRESET. The UPM provides a mechanism by which 
memory control signals can meet the timing requirements of the device without losing data. 
The mechanism is the exception pattern which defines how the UPM deasserts its tenes 
in a controlled manner. 
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15.6.2 Programming the UPM 


The UPM is a microsequencer that requires microinstructions or RAM words to generate 
signal timings for different memory cycles. Program the UPMs in the following steps: 

1. Write patterns into the RAM array. 

2. Program MPTPR. 

3. Program the machine mode register (MAMR and MBMR). 

4. Set up BRx and ORx. 


15.6.3 Control Signal Generation Timing 


Fields in the RAM word specify the value of the various external signals at each clock edge. 
The signal timing generator causes external signals to behave according to the timing 
specified in the current RAM word. Figure 15-34 and Figure 15-35 show the clock schemes 
of the UPMs in the memory controller. The clock phases shown reflect timing windows 
during which generated signals can change state. Figure 15-34 shows the clock scheme 
selected when the SCCR[EBDF] = 00; CLKOUT is the same as system clock. 











System Clock 
| | \ | | 
CLKOUT 
| | | | | 
GCLK1_50 | ) | | ) 
| | | | | | | | 
GCLK2_50 ! : 








| 
Clock Phase 1 | 2 | 3 4 1 | 2 | 3 | 4 
RAM Word 1 RAM Word 2 


Figure 15-34. UPM Clock Scheme One (Division Factor = 1) 


In Figure 15-35, if SCCR[EBDF] = 01, CLKOUT equals the system clock divided by 2. In 
this scheme GCLK1_50 does not have a 50% duty cycle. 
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System Clock 





CLKOUT | | | ‘a 


GCLK1_50 | | | | l | | 





GCLK2_50 | | 


| 
| 
| 
Clock Phase 1 | 2 3 | 4 1 | 2 | 3 | 4 
RAM Word 1 RAM Word 2 


Figure 15-35. UPM Clock Scheme Two (Division Factor = 2) 








The state of the external signals may change (if specified in the RAM array) at any edge of 
GCLK1_50 and GCLK2_50, plus a propagation delay, specified in the MPC850 Hardware 
Specifications. Note however that only the CS signal corresponding to the currently 
accessed bank will be manipulated by the UPM pattern when it runs. The BS signal 
assertion and negation timing is also specified for each cycle in the RAM word, but which 
of the four BS signals will be manipulated by the being run depends on the port size of the 
specified bank, the external address accessed, and the value of TSIZn. The GPL lines toggle 
as programmed for any access that initiates a particular pattern, but resolution of control is 
slightly more limited. 7 


The examples in Figure 15-36 and Figure 15-37 show how to control the timing of CS, 
GPL1, and GPL2. UPM RAM words determine the values of the CST[1—4], G1T3, G1T4, 
G2T3, and G2T4 bits, which specify the timing of chip-selects, byte-selects, and GPL 
signals based on the edges of GCLK1_50 or GCLK2_50. The clock phases shown refer to 
the timing windows when the signals controlled by these bits in the RAM word are driven. 
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Figure 15-36. UPM Signals Timing Example One (Division Factor = 1, EBDF = 00) 
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Figure 15-37. UPM Signals Timing Example Two (Division Factor = 2, EBDF = 01) 
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15.6.4 The RAM Array 

The RAM array for each UPM is 64 locations deep and 32 bits wide, as shown in 
Figure 15-38. The signals at the bottom of Figure 15-38 are UPM outputs. The selected CS 
is for the bank that matches the current address. The selected BS is for the byte lanes read 
or written by the access. 


32-Bits Wide 
GCLK1_50 RAM Array ose 
GCLK2_50 7 Signals Timing Generator 
CS BS 


CS Signal BS Signal 
Selected Bank TSIZ, PS, A[30-31] 


en ——— 


CSj0-7]}  GPLO GPLi GPL2 GPL3 GPL4 GPI5 S/0-3) 


Figure 15-38. RAM Array and Signal Generation 


Each UPM request (except software requests issued via RUN commands in MCR) has a 
special address that specifies the beginning of the associated pattern in the UPM RAM 
array. Table 15-13 shows start addresses of the UPM RAM words for each request type. 
(See also Figure 15-32.) 


Table 15-13. UPM Start Address Locations 


Request to Be Serviced UPM Start Address 


Read burst cycle (RBS) 


Write single beat cycle (WSS) 

_| Write burst cycle (WBS) 
Periodic timer request (PTS) 
Exception (EXS) 





15.6.4.1 RAM Words 


The RAM word, shown in Figure 15-39, is a 32-bit microinstruction stored in one of 64 
locations in the RAM array. It specifies timing for external signals controlled by the UPM. 
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3 a 
UTA | TOD | LAS 
: 7 TT 


(All 32 bits of the RAM word are addressed as shown in the address row above.) 


Figure 15-39. The RAM Word 


Table 15-14 describes RAM word fields. 
Table 15-14. RAM Word Bit Settings 


| Chip-select timing 4. Defines the state of CS during clock phase 1. 
0 Asserted at the falling edge of GCLK2_50. 
| 1 Negated at the falling edge of GCLK2_50. 


Chip-select timing 1. Defines the state of CS during clock phase 2. 
0 Asserted at the rising edge of GCLK1_50. 
1 Negated at the rising edge of GCLK1_50. 


Chip-select timing 2. Defines the state of CS during clock phase 3. 
0 Asserted at the rising edge of GCLK2_50. 
1 Negated at the rising edge of GCLK2_50. 


Chip-select timing3. Defines the state of CS during clock phase 4. 
0 Asserted at the falling edge of GCLK1_50. 
1 Negated at the falling edge of GCLK1_50. 


Byte-select timing 4. Defines the state of BS during clock phase 1. 

0 Asserted at the falling edge of GCLK2_50. 

1 Negated at the falling edge of GCLK2_50. 

The final value of the BS lines depends on the values of BRx[PS], the TSIZ lines, and A[30-31] for 
the access. See Section 15.6.4.3, “Byte-Select Signals (BSTx).” 


Byte-select timing 1. Defines the state of BS during clock phase 2. 

0 Asserted at the rising edge of GCLK1_50. 

1 Negated at the rising edge of GCLK1_50. 

The final value of the BS lines depends on the values of BRx[PS], the TSIZ lines, and A[30-31] for 
the access. See Section 15.6.4.3, “Byte-Select Signals (BSTx).” 


Byte-select timing 2. Defines the state of BS during clock phase 3. 

0 Asserted at the rising edge of GCLK2_50. 

1 Negated at the rising edge of GCLK2_50 

The final value of the BS lines depends on the values of BRx[PS], the TSIZ lines, and A[30-31] for 
the access. See Section 15.6.4.3, “Byte-Select Signals (BSTx).” 
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Table 15-14. RAM Word Bit Settings (Continued) 


peepee aon 


7 BST3 | Byte-select timing 3. Defines the state of BS during clock phase 4. 
0 Asserted at the falling edge of GCLK1_50. 






























1 Negated at the falling edge of GCLK1_50. 
The final value of the BS lines depends on the values of BRx[PS], the TSIZ lines, and A[30-31] for 
the access. See Section 15.6.4.3, “Byte-Select Signals (BSTx).” 


GOL | General-purpose line 0 lower. Defines the state of GPLO during phases 1-3. 
10 Asserted at the falling edge of GCLK2_50. | 


11 Negated at the falling edge of GCLK2_50. 
00 Driven at the falling edge of GCLK2_50 with an address signal as defined in MxMR[GOCLx]. 
10-11 General-purpose line 0 higher. Defines the state of GPLO during phase 4. 
10 Asserted at the falling edge of GCLK1_50. 
11 Negated at the falling edge of GCLK1_ 50. 
00 Driven at the falling edge of GCLK1_50 with an address signal as defined in MxMR[GOCLx]. 
eee G1T4 | General-purpose line 1 timing 4. Defines the state of GPL1 during phase 1-3. 
0 Asserted at the falling edge of GCLK2_50. 
1 Negated at the falling edge of GCLK2_50. 
G1T3 | General-purpose line 1 timing 3. Defines the state of GPL1 during phase 4. 
0 Asserted at the falling edge of GCLK1_50. | 


1Negated at the falling edge of GCLK1_50. 





G2T4 | General-purpose line 2 timing 4. Defines the state of GPL2 during phase 1-3. 
0 Asserted at the falling edge of GCLK2_50. 
1 Negated at the falling edge of GCLK2_50. 


G2T3 | General-purpose line 2 timing 3. Defines the state of GPL2 during phase 4. 
0 Asserted at the falling edge of GCLK1_50. 
1 Negated at the falling edge of GCLK1_50. 


7 





G3T4 | General-purpose line 3 timing 4. Defines the state of GPL3 during phase 1-3. | 
0 Asserted at the falling edge of GCLK2_50. 
1Negated at the falling edge of GCLK2_50. 


G3T3 | General-purpose line 3 timing 3. Defines the state of GPL3 during phase 4. 
0 Asserted at the falling edge of GCLK1_50. 
1Negated at the falling edge of GCLK1_50. 


G4T4/ | General-purpose line 4 timing 4/delay time 3. The function is determined by MxMR[GPLx4DIS]. 
DLT3 


If MxMR defines UPWAITx/GPL_x4 as an output (GPL_x4), this bit functions as G4T4: 
0 The value of GPL4 at the falling edge of GCLK2_50 will be 0. | 







—_ 
NN 





1 The value of GPL4 at the falling edge of GCLK2_50 will be 1. 


If MxMR[GPLx4DIS] = 1, UPWAITx is chosen and this bit functions as DLTS. 
0 The data bus should be sampled at the rising edge of GCLK2_50 for a read in this cycle. 


DLT3 
1 The data bus should be sampled at the falling edge of GCLK2_50 for a read in this cycle. 


G4T3/ | General-purpose line 4 timing 3/wait enable. Function depends on the value of MxMR[GPLx4DIS]. 
WAEN 


4T3 | If MxMR[GPLx4DIS] = 0, G4T3 is selected. 
0 The value of GPL4 at the falling edge of GCLK1_50 will be 0. 





i<o) 





1 The value of GPL4 at the falling edge of GCLK1_50 will be 1. 
WAEN | If MxMR[GPLx4DIS] = 1, WAEN is selected. 







0 The UPWAITx function is disabled. 
1 The logical value of the UPM-controlled external signals are frozen when UPWAITx is asserted. 
UPWAITx is sampled on the falling edge of GCLK2_50. See Figure 15-45 for more information. 


— = — 
co 


G) G) 
x 
ay 
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Table 15-14. RAM Word Bit Settings (Continued) 


omen 


G5T4 | General-purpose line 5 timing 4. Defines the state of GPL5 during phase 1-3. 
0 The value of GPL5 at the falling edge of GCLK2_50 will be 0. 
1The value of GPL5 at the falling edge of GCLK2_50 will be 1. 


G5T3 | General-purpose line 5 timing 3. Defines the state of GPL5 during phase 4. 

















O The value of GPL5 at the falling edge of GCLK1_50 will be 0. 
1 The value of GPL5 at the falling edge of GCLK1_50 will be 1. 


BS 3| 2 
fo) 


Ee ia pa Reserved, should be cleared. 


LOOP | Loop. The first RAM word in the RAM array where LOOP is 1 is recognized as 5 the loop start word. 
The next RAM word where LOOP is 1 is the loop end word. RAM words between the start and end 
are defined as the loop. The number of times the UPM executes this loop is defined in the 
corresponding loop field of the MxMR. 
|O The current RAM word is not the loop start word or loop end word. 

1 The current RAM word is the start or end of a loop. 
See Section 15.6.4.5, “Loop Control (LOOP).” 


| EXEN Exception enable. If an external device asserts TEA or RESET, EXEN allows branching to an 
| exception pattern at the exception start address (EXS) at a fixed address in the RAM array. 
0 The UPM continues executing the remaining RAM words. 
1 The current RAM word allows a branch to the exception pattern after the current cycle if an 


exception condition is detected. The exception condition can be an external device asserting TEA, 
HRESET, or SRESET. 


26-27] AMX | Address multiplexing. Determines the source of A[6—31] at the falling edge of GCLK1_50. 

00 A[6—31] is the non-multiplexed address. For example, column address. 

01 Reserved. 

10 A[6—31] is the address requested by the internal master multiplexed according to MxMR[AMx]. 
For example, row address. 

11 A[6—31] is the contents of MAR. Used for example, during SDRAM mode initialization. 


Next address. Determines when the address is incremented during a burst access. 
0 The address increment function is disabled 
1 The address is incremented in the next cycle. In conjunction with the BRx{PS], the increment value 


of A[28-—31] at the falling edge of GCLK1_50 is as follows 
If the accessed bank has a 32-bit port size, the value is incremented by 4. 
TODT 


If the accessed bank has a 16-bit port size, the value is incremented by 2. 
LAST 


If the accessed bank has an 8-bit port size, the value is incremented by 1. 
Note: The value of NA is relevant only when the UPM serves a burst-read or burst-write request. NA 
is reserved under other patterns. 





| UPM transfer acknowledge. Controls the state of TA sampled by the external bus interface in the 

current memory cycle. TA is output at the rising edge of GCLK2_50. 

0 TA is driven low on the rising edge of GCLK2_50. The bus master samples it low in the next clock | 
cycle. 

1 TA is driven high on the rising edge of GCLK2_50. 






Turn-on disable timer. Controls the disable timer mechanism. This bit has meaning only in RAM 
words for which UTA = 0; otherwise it is a don’t care. 

0 The disable timer is turned off. 

1 The disable timer for the current bank is activated preventing a new access to the same bank 
(when controlled by the UPMs) until the disable timer expires. For example, precharge time. 






Last. If this bit is set, it is the last RAM word in the program. 
0 The UPM continues executing RAM words. 
1 The service to the UPM request is done. 
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15.6.4.2 Chip-Select Signals (CSTx) 

If BRx[MS] of the accessed bank selects a UPM on the currently requested cycle the UPM 
manipulates the CS signal for that bank with timing as specified in the UPM RAM word. 
The selected UPM affects only assertion and negation of the appropriate CSx signal. The 


state of the selected CSx signal of the corresponding bank depends on the value of each 
CSTn bit. . | 


Figure 15-40 and the timing diagrams in Figure 15-36 and Figure 15-37 shows how UPMs 
control CS signals. 


Bank Selected 












MS[0-1] in BRx 






Switch 






\ 





\ 
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| 00 | PCM | 
oes 


Figure 15-40. CSx Signal Selection 


15.6.4.3 Byte-Select Signals (BSTx) 


BRx[MS] of the accessed memory bank selects a UPM on the currently requested cycle. 
The selected UPM affects only the assertion and negation of the appropriate BS signal; its 
timing as specified in the RAM word. The state of each BS[O—3] signal depends on the 
value of each BSTx bit and the values of BRx[PS], TSIZn, and A[30—31] in the current 
cycle.The BS signals are also controlled by the port size of the accessed bank, the transfer 
size of the transaction, and the address accessed. Figure 15-41 shows how UPMs control 
BS signals. 
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Figure 15-41. BSx Signal Selection 
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The uppermost byte select (BSO) indicates that D[O0—7] contains valid data during a cycle. 
Likewise, BS1 indicates that D[8—15] contains valid data, BS2 indicates that D[16—-23] 
contains valid data, and BS3 indicates that D[24—31] contains valid data during a cycle. 
Table 15-15 shows how BS signals affect 32-, 16-, and 8-bit accesses. Note that for a 
periodic timer request and a memory command request, the BS signals are determined only 
by the port size of the bank. 


Table 15-15. Enabling Byte-Selects 


| Address | 32-Bit Port Size | 16-Bit Port Size 8-Bit Port Size 
Size 


Byte 


ee 
Se 


ae 
reso pepe pe pep eye pepe | 23 tM 


15.6.4.4 General-Purpose Signals (GxTx, GOx) 

The general-purpose signals (GPL[1—5]) have two bits in the RAM word that define the 
logical value of the signal to be changed at the falling edge of GCLK1_50 or GCLK2_50. 
GPLO has two 2-bit fields that perform this function plus an additional function explained 
below. GPLS and GPLO offer the following enhancements beyond the other GPLx signals: 


























¢ GPL5 can be controlled during phase 4 of the first clock cycle according to the value 
of GSLS, as shown in Figure 15-42. This allows it to assert earlier (simultaneous 
with TS, for an internal master), which can speed up the memory interface, 
particularly when GPL5 is used as a control signal for external address multiplexers. 
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GCLK250 eee | | 








GCLK1_50 | | | | | 
| | 
| | | | | | | | | | 
| 
GPL5 | | 
| 
| | | I | | | | | | 
| I | I 
TS | | | | | | | | 
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Figure 15-42. Early GPL5 Control 


¢ GPLO can be controlled by an address line specified in MxMR[GOCLx]. To use this 
feature, set GOH and GOL in the RAM word. For example, for a SIMM with a at 
banks, this address line can be used to switch between banks. 


The state of GPL_x5 logic depends on the defined in Table 15-16. In the first clock cycle 
of the slave access, GPL_x5 reflects the value of ORx[G5LS]; in subsequent cycles, its state 
is determined by GST4 and GST3 in the RAM word. If the UPMB controls slave access, 
ORx[GSLA] can be used to select the active GPL_x5 signal. GSLS applies only to memory 
requests and not to RAM words executed by the RUN command, exception, or memory 
periodic timer requests. 


Table 15-16. GPL_X5 Signal Behavior 


Controlling | Controlling Machine Controlling Machine | ORx | RAMWord _ | RAM Word Word 
G5T4 
GPL_AS5 is driven low at the falling edge of GCLK1_50. 
GPL_AS is driven high at the falling edge of GCLK1_50. 


X GPL_AS is driven low at the falling edge of GCLK2_50 in 
| the current UPM cycle. 

















GPL_X5 Behavior at the Controlling Clock Edge 


G5LS G5T3 











GPL_A5 and GPL_B5 do not change their value. 

























1 GPL_AS is driven high at the falling edge of GCLK2_50 in 
the current UPM cycle. 
GPL_A® is driven low at the falling edge of GCLK1_50 in 
the current UPM cycle. 
1 GPL_AS is driven high at the falling edge of GCLK1_50 in 
the current UPM cycle. . 
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Table 15-16. GPL_X5 Signal Behavior (Continued) 


Controlling Machine RAM Word 
Memory | Slave Access 


UPMB First 
1 


1 


GPL_X5 Behavior at the Controlling Clock Edge 








GPL_B5 is driven low at the falling edge of GCLK1_50. 





GPL_B5 is driven high at the falling edge of GCLK1_50. 









X 
X 





GPL_AS is driven low at the falling edge of GCLK1_50. 





GPL_AS is driven high at the falling edge of GCLK1_50. 





X 
X 
x | GPL_B5 is driven low at the falling edge of GCLK2_50 in 
the current UPM cycle. 


X 





1 


GPL_B5 is driven high at the falling edge of GCLK2_50 in 
the current UPM cycle. 


GPL_B5 is driven low at the falling edge of GCLK1_50 in 
the current UPM cycle. 





—_ 


GPL_B5 is driven high at the falling edge of GCLK1_50 in 
the current UPM cycle. 





xX GPL_AS is driven low at the falling edge of GCLK2_50 in 


= the current UPM cycle. 


1 





GPL_AS is driven high at the falling edge of GCLK2_50 in 
the current UPM cycle. 





GPL_AS is driven low at the falling edge of GCLK1_50 in 
the current UPM cycle. 





the current UPM cycle. 





1 | GPL-ASis driven high at the falling edge of GCLK1_50 in 


15.6.4.5 Loop Control (LOOP) 

The LOOP bit in the RAM word (bit 24) specifies the beginning and end of a set of UPM 
RAM words that are to be repeated. The first time LOOP = 1, the memory controller 
recognizes it as a loop start word and loads the memory loop counter with the 
corresponding contents of the loop field shown in Table 15-17. The next RAM word for 
which LOOP = 1 is recognized as a loop end word. When it is reached, the loop counter is 
decremented by one. 


Continued loop execution depends on the loop counter. If the counter is not zero, the next 
RAM word executed is the loop start word. Otherwise, the next RAM word executed is the 
one after the loop end word. Loops can be executed sequentially but cannot be nested. 
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- Table 15-17. MxMR Loop Field Usage 


Request Serviced 

_| Read single-beat cycle 
Read burst cycle 
Write single-beat cycle 
Write burst cycle 
Periodic timer expired 


15.6.4.6 Exception Pattern Entry (EXEN) 


When the MPC850 under UPM control begins accessing a memory device, the external 
device may assert TEA, SRESET, or HRESET. An exception occurs when one of these 
signals is asserted by an external device and the MPC850 begins closing the memory cycle 
transfer. When one of these exceptions is recognized and EXEN in the RAM word is set, 
the UPM branches to the special exception start address (EXS) and begins operating as the 
pattern defined there specifies. See Table 15-15. The user should provide an exception 
pattern to deassert signals controlled by the UPM in a controlled fashion. For DRAM 
control, a handler should negate RAS and CAS to prevent data corruption. If EXEN = 0, 
exceptions are deferred and execution continues. After the UPM branches to the exception 
start address, it continues reading until the LAST bit is set in the RAM word. 


15.6.4.7 Address Multiplexing (AMX) 


To support many devices with multiplexed address signals, the upper address signals can 
be driven on the lower address lines. MxMR[AMA] and MxMR[AMB] control which 
upper address signals are on which lower address signals. 





Note that this feature of internally multiplexing address signals should only be used in a 
system where the MPC850 is the only external bus master. If other devices can be bus 
masters, address multiplexing must be done in external logic. One of the UPM’s output 
signals can be used to control this external multiplexing logic; GPL5 has been specifically 
enhanced for this. See the description of GPL5 in Section 15.6.4.4, “General-Purpose 
Signals (GxTx, GOx).” | 








ORx[SAM] and the AMX field of the RAM words determine when the multiplexing occurs. 
ORx[SAM] controls address multiplexing for the first clock cycle. The AMX field in the 
RAM word determines the multiplexing for subsequent clock cycles. As an address is 
driven off of the falling edge of GCLK1-—SO, the address in a particular clock cycle is 
actually controlled by the previous RAM word, as shown in Figure 15-43. 


The AMX field can be used to output the contents of MAR on the address signals. 
Figure 15-43 shows address multiplex timing. 
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Figure 15-43. Address Multiplex Timing 


Table 15-18 shows how MxMR[AMsg] settings affect address multiplexing. 
Table 15-18. Address Multiplexing 
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Table 15-19 shows how AMx can be defined to interface with a range of DRAM modules. 
Table 15-19. AMA/AMB Definition for DRAM Interface 


DRAM Address Pin Number 


—_s]} —_ 
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Data Bus MPC850 Address 


Width Memory Size 


Pin Connection 
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Table 15-19. AMA/AMB Definition for DRAM Interface (Continued) 


Data Bus . 
Width Memory Size 


16 bits 128 Kbyte 
256 Kbyte 
512 Kbyte 

1 Mbyte | 

2 Mbyte | 

4 Mbyte 

512 Kbyte 
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8 Mbyte 
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DRAM Address Pin Number 


Pin Connection 
000 

A19—A30 
001 


| 

| 

Al 

Al 

11 A 


MPC850 Address 





oO 


ie) 


io) 





ee) 


a oa ee es ee Os eG wok ck |) a ee 
po] — (ee) are 


1 
1 


mck: 
NO 


A18—A30 


—_ 
OT 


— 
NO 


1 
1 
1 
1 
5 | 
1 
1 


4 
0 
1 
3 
4 

11 
3 
4 
2 

13 

14 

15 
3 

13 





MOTOROLA Chapter 15. Memory Controller 15-47 


Part IV. The Hardware Interface 


Table 15-19. AMA/AMB Definition for DRAM Interface (Continued) 


DRAM Address Pin Number 









MPC850 Address 
Pin Connection 


A22-A29 
A21—-A29 











Data Bus 
Width | 












Memory Size 


ee 
ae 
F512 Kbyte | 512 Kbyte _ ed 
| ime {| 
| 2Mbyte fT 
|. aMbye {2 
ae ee ee 
| 2Moyte | te 
a a 
ee eed 
| eMoyte | 
i 
ES see 
Ce 
ec cl 
a 
ee 
ae 
Pee 
| 
ae 
ae 





32 bits 
















| 
[zene [8 


15.6.4.8 Transfer Acknowledge and Data Sample Control (UTA, DLT3) 
During a memory access, the UTA bit of the RAM word controls the state of TA driven by 
the UPM. TA is driven on the rising edge of GCLK2_50. Therefore, because TA is also 
sampled on the rising edge of GCLK2_50, programming UTA to assert in the RAM word 
causes the bus master to sample TA as asserted in the next cycle. 


10 
11 
12 
10 
11 
12 
13 
10 
11 
12 
13 
14 
11 
12 
13 
13 
14 
13 





When a read access is handled by the UPM and the UTA bit is 0, the value of the DLT3 bit 
in the same RAM word indicates when the data input is sampled by the internal bus master, 
assuming that MxMR[GPLx4DIS] = 1. 


e If G4T4/DLT3 functions as DLT3 and DLT3 = 1 in the RAM word, data is latched 
on the falling edge of GCLK2_50 instead of the rising edge, which is normal. This 
feature lets the user speed up the memory interface by latching data 1/2 clock early, 
which can be useful during burst reads. This feature should be used only in systems 
without external synchronous bus devices. 
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e If G4T4/DLT3 functions as G4T4, data is latched on the rising edge of the external 
bus clock, as is normal in MPC850 bus operation. 


Figure 15-44 shows data sampling that is controlled by the UPM. 


To Internal 
Data Bus 





Data Bus 








, 


DLT3 and GPLx4DIS GCLK2_50 


Figure 15-44. UPM Read Access Data Sampling 
15.6.4.9 Disable Timer Mechanism (TODT) 


The disable timer associated with each UPM allows a minimum time to be guaranteed 
between two successive accesses to the same memory bank. This feature is critical when 
DRAM requires a RAS precharge time. The TODT bit in the RAM word turns the timer on 
to prevent another UPM access to the same bank until the timer expires.The disable timer 
period is determined in MxMR[DSx]. The disable timer does not affect memory accesses 
to different banks. 





TODT is usually set in the RAM word in which LAST = 1. However, it can be set in a 
previous RAM word, if, for example, one pattern requires n clocks of RAS precharge 
enforced outside of itself, while another pattern requires only n - 1. 


15.6.4.10 The Last Word (LAST) 

When the LAST bit is read in a RAM word, the current UPM pattern terminates and the 
highest priority pending UPM request (if any) is serviced immediately in the external 
memory transactions. If the disable timer is activated and the next access is top the same 


bank, the execution of the next UPM pattern is held off for the number of clock cycles 
specified in MxMR[DSx]. 


15.6.4.11 The Wait Mechanism (WAEN) 


The WAEN bit can be used to enable the UPM wait mechanism in selected UPM RAM 
words. The wait mechanism works differently for synchronous and asynchronous masters. 





15.6.4.11.1 Internal and External Synchronous Masters 


If the UPM reads a RAM word with the WAEN bit set, the external UPWAIT signal is 
sampled and synchronized by the memory controller and the current request is frozen (if 
and while UPWAIT remains asserted). If the WAEN bit is set and UPWAIT was sampled 
high on the previous falling edge of GCLK2_50, the logical value of the external signals 
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are frozen to the value defined at the next falling GCLK2_50 edge as programmed in the 
RAM word until UPWAIT is negated. This allows wait states to be inserted as required by 
an external device through an external signal. 


Figure 15-45 shows how the WAEN bit in the word read by the UPM and the UPWAIT 
signal are used to hold the UPM in a particular state until UPWAIT is negated. As the 
example in Figure 15-45 shows, the CSx and GPL states (C12 and F) and the WAEN value 
(CC) are frozen until UPWAIT is recognized as deasserted. 


CLKOUT | | | | | | | | | | | | | 


GCLK1_50 | | | | | | 


CS aXaXaKoXaKaXaKaXareneyee ————~« C14 


| 
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| 
GPL {a XeX_ = ) SCE A a G 
ti a aa : 
we AA : BB : | DD 
UPWAIT SONNY XXX OOO XXX XX ! 
ee ee 


Figure 15-45. Wait Mechanism Timing for Internal and External Synchronous 
Masters 


15.6.4.11.2 External Asynchronous Masters 

For an external asynchronous master, AS is the external signal that activates the wait 
mechanism. The UPM enters a wait state if AS was sampled asserted on the previous falling 
edge of GLCK2_50 and WAEN = 1 in the current RAM word. In this wait state, external 
signals are frozen after the falling edge of GCLK2_50, as programmed in the RAM word 
in which WAEN is set. This is demonstrated in the example in Figure 15-46 in which the 
CSx and GPLI states (C12 and F) and the WAEN value (CC) are frozen until AS is 
recognized as deasserted. The TA signal driven by the UPM also remains in its programmed 
state until AS is negated. This allows TA to be used as an asynchronous handshake signal 
by programming UTA = 0 in the same RAM word in which WAEN = 1. If this is done, TA 
can be used to signal that AS should deassert (similar to DTACK in the 68000 bus). 





The wait state is exited when AS is negated, at which point all external signals controlled 
by the UPM are driven high asynchronously from the AS deassertion. External signals are 


15-50 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part IV. The Hardware Interface 


driven in this state until the LAST bit is set ina RAM word. The TODT bit is relevant only 
in words read by the UPM after AS is negated. 


For a comprehensive discussion of external bus interfacing, see Section 15.8, “External 
Master Support.” 
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Figure 15-46. Wait Mechanism Timing for an External Asynchronous Master 


15.7 Handling Devices with Slow or Variable Access 
Times 


The memory controller provides two ways to interface with slave devices that are very slow 
(access time is greater than the maximum allowed by the user programming model) or 
cannot guarantee a predefined access time (for example some FIFO, hierarchical bus 
interface, or dual-port memory devices). These mechanisms are as follows: 


e The wait mechanism— Used only in accesses controlled by the UPM. 
MAMR[GPLA4DIS] and MBMR[GPLB4DIS] enable this mechanism. 

e The external TA mechanism is used only in accesses controlled by the GPCM. 
ORx[SETA] specifies whether TA is generated internally or externally. 


The following sections show how the two mechanisms work. 
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15.7.1 Hierarchical Bus Interface Example 


Assume that the CPU initiates a local-bus read cycle that addresses main memory 
connected to the system bus. The hierarchical bus interface accepts local bus requests and 
generates a read cycle on the system bus. The programmer cannot predict when valid data 
can be latched by the CPU because a DMA device may be occupying the system bus. 


e The wait solution (UPM)—The external module asserts UPWAIT to the memory 
controller to indicate that data is not ready. The memory controller synchronized this 
signal because the wait signal is asynchronous. As a result of the wait signal being 
asserted, the UPM enters a freeze mode at the falling edge of CLKOUT upon 
encountering the WAEN bit being set in the UPM word. The UPM stays in that state 
until UPWAIT is negated. After UPWAIT is negated, the UPM continues executing 
from the next entry to the end of the pattern (LAST bit is set). 


e The external TA solution (GPCM)—The bus interface module asserts TA to the 
memory controller when it can sample data. 


15.7.2 Slow Devices Example 


Assume the CPU initiates a read cycle from a device whose access time exceeds the 
maximum allowed by the user programming model. 


e The wait solution (UPM)—The CPU generates a read access from the slow device. 
The device in turn asserts the wait signal as long as the data is not ready. The CPU 
samples data only after the wait signal is negated. 


e The external TA solution (GPCM)— The CPU generates a read access from the slow 
device, which must generate the synchronous TA when it is ready. 


15.8 External Master Support 


The memory controller supports internal and external bus masters. Accesses from the core 
or the CPM are considered internal; accesses from an external bus master are external. 
External bus master support is available only if enabled in the SIU module configuration 
register (SIUMCR), described in Section 10.4.2. There are two types of external bus 
masters: 


e Synchronous bus masters synchronize with CLKOUT and may or may not use the 
MPC850 memory controller to access a slave. 


¢ Asynchronous bus masters use an address strobe signal (AS) that handshakes with 
the MPC850 memory controller to access a slave device or bypass the memory 
controller to perform the slave access. 


15.8.1 Synchronous External Masters 


Synchronous masters initiate a transfer by asserting TS. A[6-31], RD/WR, BURST, and 
TSIZ must be stable before the rising edge of CLKOUT after TS is asserted and until the 
last TA is negated. Because the external master operates synchronously with the MPC8S0, 
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meeting setup and hold times for all inputs associated with the rising edge of CLKOUT is 
critical. To support synchronous mode using the memory controller, SIUMCR[SEME] 
must be set. When TS is asserted, the memory controller compares the address with each 
of its valid banks. If a match is found, control signals to the slave are generated and TA is 
supplied to the external master. If SEME = 0, the memory controller is bypassed and the 
external synchronous master must provide control signals to the slave. See Figure 15-47. 


15.8.2 Asynchronous External Masters 


Asynchronous masters initiate transfers by driving the address bus and asserting AS. 
A[6-31], RD/WR, and TSIZ must have a proper setup time before AS is asserted. To 
support asynchronous mode, SIUMCR[AEME] must be set. The memory controller 
synchronizes AS assertion to its internal clock and generates control signals to the slave 
device. When AS is synchronized, the memory controller compares the address with each 
of its defined valid banks; if a match is found, control signals to the slave are generated and 
TA is supplied to the external master. All control signals to the memory device and TA are 
negated with the negation of AS. If AEME = 0, the memory controller is bypassed and the 
external asynchronous master must provide control signals to the slave. In this mode, the 
MPC850’s AS signal cannot be used as an input. See Figure 15-48. 


15.8.3 Special Case: Address Type Signals for External Masters 


The AT signals are not sampled on the external bus for external master accesses. When 
external masters access slaves on the bus, the internal AT[O—2] signals reaching the memory 
controller are forced to ‘100’. The user should ensure this access matches the BRx[AT]. It 
is masked by ORx[ATM]. 


15.8.4 UPM Features Supporting External Masters 


The following sections provide information on the UPM features that support external 
masters. 


15.8.4.1 Address Incrementing for External Synchronous Bursting 
Masters 

A[28—30] should be used to generate addresses to memory devices for burst accesses. They 
duplicate the value of A[28—30] when an internal master initiates an external bus 
transaction. When an external master initiates an external bus transaction, they reflect the 
value of A[28—30] on the first clock cycle of the memory access; these signals are latched 
by the memory controller and on subsequent clock cycles, A[28—30] increments as 
programmed in the UPM. 


15.8.4.2 Handshake Mechanism for Asynchronous Bursting Masters 


A wait mechanism in the UPM supports handshaking for external asynchronous masters. 
This is provided with an AS input signal and the WAEN bit in the UPM RAM words. See 
Section 15.6.4.11, “The Wait Mechanism (WAEN).” 
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15.8.4.3 Special Signal for External Address Multiplexer Control 


If external masters exist in the system with the MPC850, address multiplexing (for DRAM 
for example) must be implemented in external logic. To control this external multiplexer, 
special features have been added to GPLS. See Section 15.6.4.4, “General-Purpose Signals 
(GxTx, GOx).” | 





15.8.5 External Master Examples 


The following sections provide external master examples. 


15.8.5.1 External Masters and the GPCM 


The following figures show examples of external masters’ interaction with the GPCM. Note 
that synchronous and external masters behave differently. Synchronous external masters 
behave like internal masters, except for an extra clock cycle at the beginning of the access 
required for address decode. Asynchronous external masters behave as described in 
Section 15.5.3, “External Asynchronous Master Support.” 
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Figure 15-47. Synchronous External Master Access 
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Figure 15-48. Asynchronous External Master Access 


15.8.5.2 External Masters and the UPM 


Figure 15-49 shows a synchronous interconnection in which an external master and the 
MPC850 can share access to a DRAM bank. Notice that CS1, UPMA, and GPL_A5 were 
chosen to help control DRAM bank accesses. To perform burst accesses initiated by the 
external master or MPC850 using this configuration, A[28—30] connects to the multiplexer 
controlled by GPL_A5. Figure 15-50 shows the timing behavior of control signals when an 
external master initiates a burst read access. The state of GPL_AS in the first clock cycle of 
the memory device access is determined by the value of the corresponding ORx[G5SLS]. In 
this example, the accessed critical word is addressed at A[28—29] = 10, which then 
increments and wraps around to the word before the critical word (01) for subsequent beats 
of this burst access. 
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Figure 15-49. Synchronous External Master Interconnect Example 
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Figure 15-50. Synchronous External Master: Burst Read Access to Page Mode 
DRAM 
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Figure 15-51 shows an asynchronous interconnection in which an external master and the 
MPC850 can share access to a DRAM bank. Notice that CS1, UPMA, and GPL_A5 were 
chosen to control DRAM bank accesses. Figure 15-52 shows the timing behavior of 
GPL_AS and other control signals when an external master to a DRAM bank initiates a 
single-beat read. The state of GPL_AS in the first clock cycle of the memory device access 
is determined by the value of the corresponding ORx[G5LS]. 
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Figure 15-51. Asynchronous External Master Interconnect Example 
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Figure 15-52. Asynchronous External Master Timing Example 
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15.9 Memory System Interface Examples 


The following examples show how to connect and set up the UPM RAM array for two types 
of DRAM— page mode DRAM and page mode extended data-out DRAM. The values used 
in these examples apply to any UPM. UPMA is used in the page mode example and UPMB 
is used in the extended data out example. 


15.9.1 Page-Mode DRAM Interface Example 


Figure 15-53 shows configuration for a 1-Mbyte, 32-bit wide memory system using four 
256 Kbyte x 8-bit DRAMs. Also shown is the physical connection between UPMA and the 
page mode DRAM. CS1 is connected to all RAS and is controlled by the base register. 
BS_A[0-—3] are mapped one-to-one to each of the four DRAMs and are controlled by the 
UPM RAM word. The refresh rate is calculated based on a 25-MHz baud rate generator 
clock and the DRAM that requires a 512-cycle refresh every 8 ms. | 
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Figure 15-53. Page-Mode DRAM Interface Connection 


Follow these steps to configure a system for page mode DRAM: 


1. Determine the system architecture, which includes the MPC850 and the memory 
system as shown in the example in Figure 15-53. 


2. Use the blank work sheet in Figure 15-70 to draw the timing diagrams for all the 


memory cycles. The timing diagrams in Figure 15-54 through Figure 15-62 can be 
used as a reference. 
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3. Translate the timing diagrams into RAM words for each type of memory access. The 
bottom half of the figures represent the RAM array contents that handle each of the 
possible cycles and each column represents a different word in the RAM array. A 
blank cell in the figures indicates a don’t care bit, which 1s typically programmed to 
logic 1 to conserve power. 


4. Define the UPM parameters that control the memory system in the following 
sequence. For additional details, see Table 15-20. 


— Program the RAM array using MCR and MDR. The RAM word must be written 
into the MDR before a WRITE command is issued to the MCR. Repeat this step 
for all RAM word entries. 


— Initialize the option and base registers of the specific bank according to the 
address mapping of the DRAM device chosen. 


— Use ORx[MS] to select the machine to control the cycles. Notice that ORx[SAM] 
determines address multiplexing for the first clock cycle and subsequent cycles 
are controlled by the UPM RAM words. Also notice that the AMX field in the 
UPM RAM word controls address multiplexing for the next clock cycle rather 
than the current one. 





— Program MAMR to select the number of columns and refresh timer parameters. 
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Table 15-20. UPMA Register Settings 
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Figure 15-54. Single-Beat Read Access to Page-Mode DRAM 
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Figure 15-55. Single-Beat Write Access to Page Mode DRAM 
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Figure 15-56. Burst Read Access to Page-Mode DRAM (No LOOP) 
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Figure 15-57. Burst Read Access to Page-Mode DRAM (LOOP) 
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Figure 15-58. Burst Write Access to Page-Mode DRAM (No LOOP) 
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Figure 15-59. Burst Write Access to Page-Mode DRAM (LOOP) 
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Figure 15-60. Refresh Cycle (CAS before RAS) to Page-Mode DRAM 
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Figure 15-61. Exception Cycle 


Page read accesses can be improved significantly by setting MAMR[GPLA4DIS] and 
ignoring GPL_A4. The processor samples the data bus at the falling edge of GCLK2_50 
when TA is asserted. Figure 15-62 shows how to use this feature to change the burst read 
access to page mode DRAM (no loop). During the four consecutive data beats, TA is 
asserted to ensure a data transfer on every data clock. The figure also shows how the burst 
read access shown in Figure 15-56 of can be reduced from 9 to 6 cycles (for 32-bit port 
size). Cycles can be reduced by using faster DRAM or a slower system clock that meets the 
DRAM access time. For a 16-bit port size memory, the reduction is from 17 to 10 cycles 
and when an 8-bit port size memory is connected, the reduction is from 33 to 18 cycles. 
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Figure 15-62. Optimized DRAM Burst Read Access 
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15.9.2 Page Mode Extended Data-Out Interface Example 


Figure 15-63 shows the configuration for a 1-Mbyte, 32-bit wide memory system using two 
256K x 16-bit page mode EDO DRAMS. Also shown is the physical connection between 
UPMB and the EDO DRAMs. The CS2 signal controlled by BRx is connected to both RAS 
signals. The BS_B[0—1] signals map to D[O—15] and BS_B[2-—3] map to D[16—31]. For this 
connection, GPL_B1 is connected to the memory device OE pins. The refresh rate 
calculation is based on a 25-MHz baud rate generator clock and the DRAM that requires a 
512-cycle refresh every 8 ms. 


This system has no external masters, and thus the MPC850 is configured to perform address 
multiplexing internally. 


MPC850 


MT4C16270 MT4C16270 


256K x 16 256K x 16 























Figure 15-63. EDO DRAM Interface Connection 


Follow these steps to configure a system for EDO DRAM: 


1. Determine the system architecture, which includes the MPC850 and the memory 
system as shown in the example in Figure 15-64. 


2. Use the blank work sheet in Figure 15-70 for timing diagrams. The timing diagrams 
in Figure 15-64 through Figure 15-69 can be used as a reference. 


3. Translate the timing diagrams into RAM words for each memory access type. The 
bottom half of the figures show the RAM array contents that handle each of the 
possible cycles; each column represents a different word in the RAM array. A blank 
cell indicates a don’t care bit (typically programmed to logic | to conserve power). 
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Define the UPMB (or UPMA) parameters that control the memory system in the 
following sequence. For additional details, see Table 15- 20. 


— Program the RAM array using MCR and MDR. The RAM word must be written 
into the MDR before a WRITE command is issued to the MCR. Repeat this step 
for all RAM word entries. 


— Initialize ORx and BRx for the required DRAM device address mapping 


— ORx[MS] selects the machine to control clock cycles. Note that ORx[SAM] 
controls address multiplexing for the first cycle; subsequent cycles are controlled 
by UPM RAM words. Also note that the AMX field in the UPM RAM word 
controls address multiplexing for the next clock cycle and not the current one. 


— Program MBMR bo select the number of columns and refresh timer parameters. 


Table 15-21. UPMB Register Settings 
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Figure 15-64. EDO DRAM Single-Beat Read Access 





MOTOROLA Chapter 15.Memory Controller 15-73 


Part IV. The Hardware Interface 

CLKOUT/GCLK2_50 
GCLK1_50 nin naninialrinrr 
- Soenenee 


= 


D[0-31] 


=| 


82 (RA 


2 


BS_B[0-3] (CAS[O-3]) 


ana 
spre PEER 
ERE 













































































GPL_B1 (OE) 

4 Bito | Oo 0 0 { yO 

Se eral eran ds + 
eee 

cs | 

bata | ot | ayo i ‘a an ; | 
bstt Bits | 1 0 0 0 

pte | | go | 8 | 8 1 

g0l0 —~Bit8 a a t—J | 
oho Bit 10 

g i 

gohi Bit 11 Z if 

m aela tyr dldl Po : 

g bie 

g2t4 Bit 4 | i 7 
923 Bit 15 |_ - nee le 

g3'4 Bit 16 poe } 

g3t3. «Bit 17 aoe a I | 

g44 Bit 18 | | Ty 

g4t3 —s-Bit 19 L [ | _| _| 
g5t4 Bi 20 | ae | Ue 

go BZN | i | | 
-_‘Bit22 ih i, | 

s Bit 23 | . =| ie 

| Bit24| 0 0 0 0 

—- eae 

amx0 Bit 26 0 0 0 X 

amx1 Bit 27 0 0 0 X 

na Bit 28 0 0 0 X 

uta Bit29 | 1 1 0 | 

todt  -«Bit30} 0 0 0 

last Bit31 | 0 0 0 Wa, _| Ri 

| WSS | WSS+1|WSS+2| WSS+3 a 




















Figure 15-65. EDO DRAM Single-Beat Write Access 
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Figure 15-66. EDO DRAM Burst Read Access 
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Figure 15-67. EDO DRAM Burst Write Access 





15-76 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part IV. The Hardware Interface 


5s 


_ LLL —— 
BS_B[0-3] (CAS|0-3}) 


: 


CLKOUT/GCLK2_50 


if 




































































GPL_B1 (OE) | 
cst4sBto | «1~=«d|:«COO 0 0 { ii | 
cst Bit 1 1 0 0 0 1 
cst2 ss: Bit2_ || 0 0 0 0 { 
cst3=s«éBit3 | «(0 o | o | 0 1 I | | 
ps4 itd | oO | Oo | 1) Ud 
bst! Bits | 0 1 { { { 
= Ne 0 1 { { | 
st3 it7 | 0 { { { 

t a 
goo pts | | | 
gt —- Bit 
mae 
g it seh 
git4 Bit 12 i ae a { { | 
git3 =sBit13.| 1 { { { 1 | 7 
g2t4 Bit 14 
g2t3. «Bit 15 
g3t4 «Bit 16 

933i 17 all. 7 
g444 ss Bit 18 a 
g4t3 «Bit 19 | 
g5t4 Bit 20 | [- i or 
gots «Bit 21 al | | : 
= Bit 22 | | | 
- Bit 23 | | i. LL 
cn 8 | 8 | 8 | 8 8 i 
exen it 25 

aI _| ah ot — _| 

amx0 Bit 26 0 | 0 | 0 0 x 
amx1 Bit 27 0 0 0 0 X 
na Bit28.| 0 0 0 0 x 
uta Bit29 | 1 { 1 { 1 
todt  - Bit30 | 0 0 0 0 { 
last —sBit31} O | O | O | O 1 ak <i 

PTS | PTS+1 | PTS+2 | PTS+3 | PTS+4 [ | a i 











Figure 15-68. EDO DRAM Refresh Cycle (CAS before RAS) 





MOTOROLA Chapter 15.Memory Controller 15-77 


Part IV. The Hardware Interface 


CLKOUT/GCLK2_50 


BS_B[0-3] (CAS[0-3]) 


15-78 





GCLK1 


C52 (RA 


SI 


YD 


° eee CLE LL 
| POPE 



























































GPL_B1 (OE) 
csi4Stiéw@itods«dsS:s«ia]ssd | 
cstt Bit 1 1 
cst2 Bit 2 1 
cst3 Bits | 1 | al x nm L | 
bst4ssBit4 | 1 
bst1 Bit 5 1 
a st 6 | | 
st it 7 
gOld Bit 8 1 4 T a 7 
g0l1 Bit 9 
a 4 10 . 
gohi__ Bit 11 
git4 Bit 12 1 = 
_ git Bit13 | 1 ied eeeeied een Le ee 
g2t4 Bit 14 
—  gat3. ss Bit 15 | | | | 
g3t4 Bit 16 
= g3t3 Bit 17 | | 
a3 BtTa | | 
gtd it 
g54 Bit 0 @ | ‘ac eae | 
_gst3 Bit 21 | 
: Bit 22 | | 
7 Bits || [_ 
loop s 24 0 | if | 
exen it 25 0 ae | 
amx0 Bit 06 | X i + | 
amx1 Bit 27 X 
na Bit 28 X 
uta Bit 29 1 
todt Bit 30 1 
last Bit 31 1 
EXS 























-—t 








| 





ae es 





Figure 15-69. EDO DRAM Exception Cycle 
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Figure 15-70. Blank Work Sheet for a UPM 
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Chapter 16 
PCMCIA Interface 


The PCMCIA host adapter module provides all control logic for a PCMCIA socket 
interface, and requires only additional external analog power switching logic and buffering. 
The PCMCIA interface supports the following: 


e A host adapter interface fully compliant with the PCMCIA standard, release 2.1+ 

(PC Card -16). 
e One PCMCIA socket, requiring only external buffering and analog switching logic. 
e Eight general-purpose I/O pins when the PCMCIA controller is not in operation 


e Two general-purpose output-only pins when the PCMCIA controller is not in 
operation 


e Eight memory or I/O windows. 


16.1 System Configuration 


In this system configuration, the socket and system bus must be electricaly isolated using 
external buffers and bus transceivers. These buffers also provide voltage conversion 
required from the 3.3- to 5-V cards. These components should be powered by the card 
power supply. Because the MPC850 can accept 5-V inputs while generating 3.3-V outputs, 
conversion is not required for inputs. Figure 16-1 shows a system configuration. 


16.2 PCMCIA Module Signal Definitions 


PCMCIA signals consist of the address and data buses, socket control signals, and 
synchronous socket status signals. A{6—31] and D[O—15] are the address and data signals of 
the system bus. Figure 16-1 shows the PCMCIA host adapter module’s external signals. 


ace Nr Le NR LE EEE EE EER EO ON TEE EEE EERE OPES EEE EE EEE EEE SESSESEESEEE SESS SSE 5S SST Gt One SE SEES SSS SSE OO ito SEE EE EEE SEES SSS SSS SSS SSS 5 
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RESET B | 
POE_B Buffer with OE 

















A[6-31] Address_B/0-25] 
REG REG B 
| + Transparent 
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ae Latch with OE ce 
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Chip Vpp 






CD1_B, CD2_B, VS1_B, VS2_B 


SPKROUT | 


Figure 16-1. System with PCMCIA Socket 





16.2.1 PCMCIA Cycle Control Signals 
Table 16-1 describes PCMCIA cycle control signals. 


Table 16-1. PCMCIA Cycle Control Signals 


ee nee 


A[6-31] | Address bus. Output. A[6—31] should be buffered to generate the socket signals A[25—0]. These address 
bus output lines allow direct addressing of 64 Mbytes of memory on the PCMCIA card. A6 is the msb. 










Attribute memory select. Output. When REG is asserted during a PCMCIA access, card access is limited 
to attribute memory when a memory access occurs (WE or OE are asserted) and to I/O ports when an I/O 
access occurs (IORD or IOWR are asserted). If REG is asserted, accesses to common memory or DMA 
devices are blocked. When no PCMCIA access is performed, this signal is TSIZO. 
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Table 16-1. PCMCIA Cycle Control Signals 





Description 






Card enable. Output. When a PCMCIA access is performed, CE1 enables even bytes; CE2 enables odd 
bytes, as shown below. To access devices supporting IDE/ATA protocols, CEx can be configured in the 

PCMCIA option registers (PORx[PRS] = 06110) to duplicate A[22—23]. At the end of the PCMCIA access 
CEx are always negated: 


2110} x | x | 8bits 


















External transceiver direction. Output. Asserted during MPC850 read cycles and negated during write 
cycles. Used in the PCMCIA interface to control the direction of the data bus transceivers. 






I/O read. Output. During PCMCIA accesses, this signal is asserted together with REG_B and is used to 
read data from the PC card I/O space. IORD_B is valid only when the REG_B and at least one of the 
CE1_B and CE2_B signals is also asserted. 


I/O write. Output. Asserted with REG_B during PCMCIA accesses used to latch data into the PC card I/O 
Space: Valid only when REGB and either or both CE1_B and CE2_B signals are also asserted. 


















Write enable/program. Output. During PCMCIA accesses, WE_B is used to latch memory write data to the 
PC card in a PCMCIA socket. Can also be used as the programming strobe for PC cards using 
programmable memory technologies. 










Address latch enable. Output strobe that controls the external latches of the address and REG signals. 
ALE_B is asserted when socket B is accessed. Note that latches are used when power consumption is an 
issue. They keep the PCMCIA signals from toggling unnecessarily when the PCMCIA cards are not being | 
accessed. If power consumption is not an issue, buffers can be used instead of ALE_x signals. 










I/O port is 16 bits. Input. Applies only when the card and its socket are programmed for I/O interface 
operation. Must be asserted by the card when the address on the bus corresponds to an address on the 
PC card and the I/O port being addressed supports 16-bit accesses. If the I/O region in which the address | 
resides is programmed as 8 bits wide, 1O1S16_B is ignored. 
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16.2.2 PCMCIA Input Port Signals 


The following signals are used by a PCMCIA slot to indicate card status. The MPC850 
provides synchronization, transition detection, optional interrupt generation, and the means 
for the software to read the signal state. This function is not necessarily specific to 
PCMCIA; a system can use these signals as a general-purpose input port with edge 
detection and interrupt capability. These signals appear on pins IP_B[0—7]. All these signals 
are symmetrical except IP_B7, which has extended edge detection capability and IP_B2, 
which serves as an IOIS16_B cycle-control signal for PCMCIA cycles. 


Table 16-2. PCMCIA Input Port Signals 


ee 


VS1_B, Voltage sense. Input. Used as VS1 and VS2 and generated by PC cards. They notify the socket of the card 
Vcc requirement. These signals are connected to IP_B[0—1]. 































Write protect. Input. When the card and socket are programmed for memory interface operation, this 
signal is used as WP. It reflects the state of the write-protect switch on the PC card. The PC card must 
assert WP when the card switch is enabled. It must be negated when the switch is disabled. For a PC card 
that is writable without a switch, WP must be connected to ground. If the PC card is permanently 
write-protected, WP must be connected to Voc. These signals are connected to IP_B2 pins. 







Card detect. Input. Provide proper detection of card insertion. They must be connected to ground internally 
on the PC card, thus, these signals are forced low when a card is placed in the socket. These signals must 
be pulled up to system Vcc to allow card detection to function while the card socket is powered down. 

These signals are connected IP_B4 and IP_B3, respectively. 






Battery voltage detect. Input. When the card and its socket are programmed for memory interface 
operation, these signals are used as BVD1_B and BVD2_B and are generated by PC cards with on-board 
batteries to report the battery condition. Both BVD1_B and BVD2_B must be held asserted when the 

battery is in good condition. Negating BVD2_B while keeping BVD1_B asserted indicates the battery is in 
a warning condition and should be replaced, although data integrity on the card is still assured. Negating 
BVD1_B indicates that the battery is no longer serviceable and data is lost, regardless of the state of 
BVD2_B. These signals are connected to IP_B6 and IP_B5, respectively. 
























Status change. Input. When the card and its socket are programmed for |/O interface operation, BVD1_B 
is used as STSCHG_B and is generated by I/O PC cards. STSCHG_B must be held negated when the 

“signal on change” bit and “changed” bit in the card status register on the PC card are either or both zero. 
STSCHG_B must be asserted when both bits = 1. 


STSCHG_B 






Speaker. input. When the card and socket are programmed for I/O interface operation, BVD2_B is used as 
digital audio (SPKR_B) and is generated by I/O PC cards. SPKR_B must be used to provide the socket’s 
single amplitude (digital) audio wave form to the system. The SPKR_B signal is routed through the 

speaker out signal (SPKROUT). 






Ready/busy or interrupt request. Input. When the card and its socket are programmed for memory 
interface operation, this signal is used as RDY/BSY_B and must be asserted by a PC card to indicate that 
the PC card is busy processing a previous write command. When the card and its socket are programmed 
for I/O interface operation, this signal is used as IREQ_B and must be asserted by a PC card to indicate 

that a device on the PC card requires service by host software. Must be held negated when no interrupt is 
requested. These signals are connected to IP_B7. 





16.2.3 PCMCIA Output Port Signals (OP[0-4]) 


A PCMCIA slot can use the signals in Table 16-3 to control the RESET input and output 
enable of the buffers to the card. The MPC850 gives software a way to control the output 
signal state. This function is not necessarily specific to the PCMCIA interface; a system can 
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use these signals as a general-purpose output port. 


Table 16-3. PCMCIA Output Port Signals 


se 


RESET_B | Card reset. Output. Provided to clear the card’s configuration option register, thus placing the card in its 


default (memory-only interface) state and beginning an additional card initialization. RESET_B is 
connected to OP2. 


PCMCIA buffers output enable. An output port line reflecting the value of PGCRB[CBOE]. Used to 
three-state address and strobe lines addressing each slot. POE_B connects to OPS. 


16.2.4 Other PCMCIA Signals 


The PCMCIA socket uses the signals in Table 16-4, although their function is not 
necessarily specific to PCMCIA. 


Table 16-4. Other PCMCIA Signals 


Power is on. Input. The card power supply circuitry can use an IRQ signal as a general- purpose interrupt 
request to notify the MPC850 when the card’s power supply reaches the full required voltage. 















SPKROUT | Speaker out. Output. Provides a digital audio wave form to be driven to the system’s speaker. It is 
generated as the SPKR_B input signal. 


16.3 Operation Description 


This section describes the operation of memory and I/O cards, interrupt detection and 
handling, power control, and reset. 


16.3.1 Memory-Only Cards 


Table 16-5 lists worst-case conditions of host programming memory cards and assumes 
WAIT is not used. If it is, the minimum strobe time is at least 35 ns + 1 system clock. 





Table 16-5. Host Programming for Memory Cards 


| Memory Access 600 ns 


Time 1 


Clock Cycle 
20 ns (50 MHz) 


30 ns (33.3MHz) | 4 


40 ns (25 MHz) 
62 ns (16 MHz) 
83 ns (12 MHz) 


' Because the minimum hold time is one clock, the real access time is access time + one clock. 
@ Worst-case setup time (STP). The worst-case setup time is address to strobe. 

3 Length (LNG) is the minimum strobe time. 

4 Worst-case hold time (HLD). The worst-case hold time is data disable from OE. 
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16.3.2 I/O Cards 


Table 16-6 lists worst-case conditions of host programming I/O cards. 


Table 16-6. Host Programming For I/O Cards 


Frequency 


208 GON 
50s 683 Me 






40 ns (25 MHz) 
62 ns (16 MHz) 
83 ns (12 MHz) 


: Setup time worst-case is for a write. In these cases, setup=data_set_up_before_iord +1 clock. 


et Se a 
a aa ae See 
a a: a ae 





16.3.3 Interrupts 


The PCMCIA interface input pins register (PIPR) reports any changes on inputs from the 
PCMCIA card to the host (BVD, CD, RDY, VS). The contents of the PCMCIA interface 
status changed register (PSCR) are logically ANDed with the PCMCIA interface enable 
register (PER) to generate a PCMCIA interface interrupt. The interrupt level is user 
programmable and the PCMCIA interface can generate an additional interrupt for 
RDY/IRQ that can trigger on level (low or high) or edge (fall or rise) of the input signal. 
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16.3.4 Power Control 


The user can perform a write cycle using one of the memory controller chip-select pins. 
This data includes the controls to the analog switch such as the MAXIM MAX780. 
However, no auto-power control is supported. 


16.3.5 Reset and Three-State Control 


The user can reset the PCMCIA cards or disable the output of the external latches by 
writing to P@CRB[CBRESET] and PGCRB[CBOE], respectively. 


16.3.6 DMA 


The MPC850 DMA module with the CPM microcode provides two independent DMA 

(IDMA) channels. See Section 19.3, “IDMA Emulation.’ The PCMCIA module can be 

programmed to generate control for an I/O device implemented as a PCMCIA card to 

respond to DMA transfer. Any window can be programmed as a DMA window through 

PORx[PRS]. When configured appropriately, the PCMCIA controller supplies the required 
signals to the socket. Note that DMA to and from the PCMCIA interface is handled through 

dual-access DMA transfers. _ 


DMA requests can be supplied through SPKR_B, IOIS16_B, or INPACK. To support 
DMA, INPACK should be connected to DREQ1 for slot B. The source for a DMA request 
is programmed through PGCRB[CBDREQ]. If the internal DMA request is disabled, the 
DMA request is assumed to be DREQ] and port C should assign PC14 as DREQI. If the 
request is enabled, port C should not be programmed to be DREQ1. 























lOlSi6_B + SPKR_B CBDREQO DREQ1 


Multiplexer Port C Logic 





CBDREQ1 














PortC DREQ1 


Internal DMA Request 


Figure 16-2. Internal DMA Request Logic 
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16.4 Programming Model 


This section describes the PCMCIA interface programming model. Generally, all registers 
are memory-mapped within the internal control register area. The registers in Table 16-7 


control the PCMCIA interface. 
Table 16-7. PCMCIA Registers 


[rene [essen 
| PIPR | PCMCIA interface input pins register 
PSCR 













[PSGR  [PGMCIAintrace status changed register 
PCMCIA base registers 0-7 (per window) 


16.4.1 PCMCIA Interface Input Pins Register (PIPR) 


Status of inputs from the PCMCIA card to the host (BVD, CD, RDY, VS) is reported to the 
PIPR, shown in Figure 16-3. PIPR is a read-only register; write operations are ignored. 


Undefined 
| R/W 


(IMMR & OxFFFFO000) + 0x0FO 


[esvsi |csvse|cewr|cscoz|ceco:|csevo2|caevor |csnoy| 


Undefined 
. | (IMMR & OxFFFFOOOO) + Ox0F2 


Figure 16-3. PCMCIA Interface Input Pins Register (PIPR) 
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Table 16-8 describes PIPR fields. 
Table 16-8. PIPR Field Descriptions 


cd 
[ois [= [Resoned,shoukbeceared 
19 
















18 | oacbe [tarddetedaereads 


24-31 | — — |Reserved, should be cleared. | 





16.4.2 PCMCIA Interface Status Changed Register (PSCR) 


The contents of PSCR, shown in Figure 16-4, are logically ANDed with the PER to 
generate a PCMCIA interface interrupt. Writing zeros has no effect; writing ones clears the 
corresponding interrupt state. 












Undefined 
(IMMR & OxFFFF0000) + 0x0E8 








Undefined 
(IMMR & OxFFFFOOOO) + OxOEA 


Figure 16-4. PCMCIA Interface Status Changed Register (PSCR) 






Table 16-9 describes PSCR fields. 
Table 16-9. PSCR Field Descriptions 


ee 
[= fesoned saute deered SSCS 
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Table 16-9. PSCR Field Descriptions (Continued) 


meee [tion 
[= Reserved shouldbe dears 












CBRDY_R_ | RDY/IRQ of card B pin rising edge detected. Device and socket interrupt 
CBRDY_F | RDY/IRQ of card B pin falling edge detected. Device and socket interrupt 
28-31 ae Reserved, should be cleared 


16.4.3 PCMCIA Interface Enable Register (PER) 
Setting a bit in the PER, ee in Figure 16-5, eee corresponding sess cs 





Le 
ae 
a 


a aN 
cs. evsifos_evseice.ewr|ce coe|ce Eco1 [oe eBvba|ce EBvor|-[c8 ERDY {C8 ERDY HoO8 ERY ACB EROY FL — 


Figure 16-5. PCMCIA Interface Enable Register (PER) 





Table 16-10 describes PER fields. 
7 Table 16-10. PER Field Descriptions 


ee 
ac ae Reserved, should be 0. 


16 CB_EVS1_ | Enable for voltage sense 1 for card B changed. Setting this bit enables the interrupt on any 
signal change. . 
17 CB_EVS2_ | Enable for voltage sense 2 for card B changed. Setting this bit enables the interrupt on any 
signal change. 3 
CB_EWP | Enable for write protect for card B changed. Setting this bit enables the interrupt on any signal 
change. 













19 CB_ECD2 | Enable for card detect 2 for card B changed. Setting this bit enables the interrupt on any signal 
change. . 
CB_ECD1 | Enable for card detect 1 for card B changed. Setting this bit enables the interrupt on any signal 
change. 


21 CB_EBVD2 | Enable for battery voltage/SPKR_B input for card B changed. Setting this bit enables the 
interrupt on any signal change. 
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Table 16-10. PER Field Descriptions (Continued) 


a 
Pas [= —_|Pesened sitve@ 
Enable for RDY/IRQ card B pin falling edge detected 
28-31) Reserved, should be 0. 


16.4.4 PCMCIA Interface General Control Register B (PGCRB) 


PGCRB, shown in Figure 16-6, is used to reset the PCMCIA cards, disable the output of 
the external latches, and specify the source used for a DMA request. 







N 
co) 














CBIREQLVL CBSCHLVL 
| Undefined — . _ 


| | 7 RW 


(IMMR & OxFFFFO000) + 0x0E4 (PGCRB) 





T 


Undefined 
R/W 
(IMMR & OxFFFFOOOO) + OxOE6 (PGCRB) 


Figure 16-6. PCMCIA Interface General Control Register B (PGCRB) 





Table 16-11 describes PGCRB fields. 
Table 16-11. PGCRB Field Descriptions | 

















16-17} CBDREQ_ | Card B DREQ. Defines internal DMA request for the on-chip DMA controller (CBDREQ 
controls DMA channel 1). 
11 Enable SPKRF_B as internal DMA request for slot B. 
18-23 Eee | Reserved, should be cleared. | | 


0-7 | CBIREQLVL | Card B IREQ_B interrupt level. Only one bit of this field should be set at any time. 
Ox Disable internal DMA request from slot B. 
24 CBOE Card B output enable. CBOE is reflected on OP2 used to three-state the external buffers 
when the card’s power is activated. 
5 


8-15 | CBSCHLVL | Card B STSCHG_B interrupt level. Only one CASCHLVLB bit should be set at any time 
10 Enable 101S16_B as internal DMA request for slot B. 
CBRESET | Card B reset. CBRESET is reflected on OP3 used to reset card B. 
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Table 16-11. PGCRB Field Descriptions (Continued) 


Oe 
26-31 Led Reserved, should be cleared. 


16.4.5 PCMCIA Base Registers 0-7 (PBRO-—PBR7) 
Setting a bit in the PBR, shown in Figure 16-5, enables the corresponding interrupt. 






(IMMR & OxFFFFO000) + 0x080 (PBRO); 0x088 (PBR1); 0x090 (PBR2); 0x098 (PBR3); 0x0A0 (PBR4); 0x0A8 
(PBR5); 0xOBO (PBR6); 0x0B8 (PBR7) 


Figure 16-7. PCMCIA Base Register (PBR) 





Table 16-12 describes the PBR. 
Table 16-12. PBR Field Descriptions 


CS 


0-31] PBA |PCMCIA base address. Compared to the address on the address bus to determine if a PCMCIA 
window is being accessed by an internal bus master. PBA is used in conjunction with POR[BSIZE]. 





16.4.6 PCMCIA Option Register 0-7 (PORO-POR7) 


The POR, shown in Figure 16-8, as the manipulation of timing, provides the address mask 
for the bank size, and defines the region, slot, write protection, and validation. 


(MMAR & OXF FFFO00O) + 0x084 (PORO); 0x08C (POR1); 0x094 (POR2); 0x09C (POR3); 0x0A4 (POR4): 
Ox0AC (PORS); 0x0B4 (POR6); 0x0BC (POR7) 


Undefined 


(IMMR & OxFFFFO000) + 0x086 (PORO); 0x08E (POR1); 0x096 (POR2); 0x09E (POR3); 0x0A6 (POR4); 
OxO0AE (PORS); 0x0B6 (POR6); OxOBE (POR7) 


Figure 16-8. PCMCIA Option Register 0—7 (PORO—POR7) 








16-12 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part IV. The Hardware Interface 


Table 16-13 describes POR fields. 
Table 16-13. POR Field Descriptions 


a 


0-4 | BSIZE | PCMCIA bank size. Determines the address mask field of each POR and provides Mastng 1 any of 
the corresponding bits in the associated PBR. The bank size is calculated as banksize = 2PS!4E 
where BSIZE represents the gray code shown below: 

00000 1 byte 01101 512 bytes 11011 256 Kbytes 
00001 2 bytes 01111 1 Kbyte 11010 512 Kbytes 

| 00011 4 bytes 01110 2 Kbytes 11110 1 Mbyte 
00010 8 bytes 01010 4 Kbytes 11111 2 Mbytes 
00110 16 bytes 01011 8 Kbytes | 11101 4 Mbytes 
00111 32 bytes 01001 16 Kbytes 11100 8 Mbytes 
10111 1111 1100 0000 0000 0000 0000 0000 0000 


00101 64 bytes 01000 32 Kbytes 10100 16 Mbytes 
0-4 | BSIZE 
(cont.) 
Addr & MASK = PBA & MASK for a valid PCMCIA access; otherwise, it is not a valid PCMCIA access 


00100 128 bytes 11000 64 Kbytes 10101 32 Mbytes 
Fe ae Reserved, should be cleared. 


01100 256 bytes 11001 128 Kbytes 10111 64 Mbytes 

12-15 | PSHT | PCMCIA strobe hold time (strobe negation to address negation). Specifies wnen IOWR_B or WE_B 
are negated during a PCMCIA write or when IORD_B or OE_B are negated during a PCMCIA read. 
Used to meet address/data hold time requirements for slow memories and peripherals. 
0000 Strobe negation to address change 0 clock 
0001 Strobe negation to address change 1 clock 



















virtual field, MASK, is defined as shown below: 

BSIZE MASK 

00000 1414 144141171 1111 11411 1114 1111 1111 
00001 1411 1111 11417 1111 1111 1111 11111110 
00011 1414114111 1111 1111 1111 1111 1111 1100 
00010 1114111114 1111 1111 1111 1111 1111 1000 
00110 1141414111 1141 11411 1111 1111 1111 0000 
00111 1111 4111 1111 1111 1111 1111 1110 0000 
00101 1111 11111111 1111 1111 1111 1100 0000 
00100 1111 11111111 1111 1111 1111 1000 0000 
01100 1111 1111 1111 1111 1111 1111 0000 0000 
01101 1114 11114 1111 1111 1111 1110 0000 0000 
01111 11111111 1111 1111 1111 1100 0000 0000 
01110 1111 1111 1111 1111 1111 1000 0000 0000 
01010 1111 1111 1111 1111 1111 0000 0000 0000 
01011 1111 1111 1111 1111 1110 0000 0000 0000 
01001 1117 1111 1111 1111 1100 0000 0000 0000 
01000 1111 1111 1111 1111 1000 0000 0000 0000 
11000 1111 1111 1111 1111 0000 0000 0000 0000 
11001 1111 1111 1111 1110 0000 0000 0000 0000 
11011 1111 11114 1111 1100 0000 0000 0000 0000 
11010 1111 1111 1111 1000 0000 0000 0000 0000 
11110 1111 1111 1111 0000 0000 0000 0000 0000 
11111 1111 1111 1110 0000 0000 0000 0000 0000 
11101 1111 1111 1100 0000 0000 0000 0000 0000 
11100 1111 1111 1000 0000 0000 0000 0000 0000 
10100 1111 1111 0000 0000 0000 0000 0000 0000 
10101 1111 1110 0000 0000 0000 0000 0000 0000 



















































BSIZE determines not only the bank size, but also how the address is compared with PBRB[PBA]. If 
1111 Strobe negation to address change 15 clock 
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Table 16-13. POR Field Descriptions (Continued) 


fais [ieme] eeon 


16-19} PSST |PCMCIA strobe set up time (address to strobe assertion). Specifies when IOWR_B or WE_B are 
_|asserted during a PCMCIA write access or when IORD_B or OE_B are asserted during a PCMCIA 
read access handled by the PCMCIA interface. This helps meet address/setup time requirements for 
slow memories and peripherals. 

0000 Reserved 

|0001 Address to strobe assertion 1 clock cycle 
0010 Address to strobe assertion 2 clock cycles 
































1111 Address to strobe assertion 15 clock cycles 








20-24| PSL |PCMCIA strobe length. Determines the number of cycles the strobe is asserted during a PCMCIA 
access for this window and, thus, it is the main parameter for determining cycle length. The cycle may 
be lengthened by asserting WAIT. 

00001 Strobe asserted 1 clock cycles 


00010 Strobe asserted 2 clock cycles 



















14111 Strobe asserted 31 clock cycles 
00000 Strobe asserted 32 clock cycles 


PCMCIA port size. Specifies the port size of this PCMCIA window. 
0 8 bits port size 
1 16 bits port size 


PCMCIA region select. 
000 Common memory space ~ 

001 Reserved 

010 Attribute memory space 

011 W/O space 

100 DMA (normal DMA transfer) 

101 DMA last transaction 

110 Drive the value of the A22 and A23 signals on CE2 and CE1. 

111 Reserved 

Note: The DMA encoding generates a normal DMA transfer unless signaled as last by the on-chip 
DMA controller. In this case TC(OE) or TC (WE) is asserted. The DMA last transaction encoding 


generates a DMA transfer with TC(OE) or TC (WE) asserted, regardless of any internal indication. 


PCMCIA slot identifier. 
0 This window defined for slot A. 
1 This window defined for slot B. . 







/26-28| PRS 

























PSLOT 





Write-protect enable. 
0 Not write protected. 
1 Write protected. Attempting to write to this window causes a machine check interrupt. 


PCMCIA valid. Indicates whether the contents of the OBR and POR pair are valid. 
0 This bank is invalid. 
1 This bank is valid. 
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16.5 PCMCIA Controller Timing Examples 
CLKOUT | | | | | | | | | | | | | | | 
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Figure 16-9. PCMCIA Single-Beat Read Cycle PRS = 0 PSST = 1 PSL = 3 PSHT =1 
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Figure 16-10. PCMCIA Single-Beat Read Cycle PRS = 0 PSST = 2 PSL = 4 PSHT = 1 
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CLKOUT | | | | | | | | | | | | | 
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Figure 16-11. PCMCIA Single-Beat Read Cycle PRS = 0 PSST = 1 PSL = 3 PSHT =0 
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CLKOUT | | | | | | | | | | | | | | | 
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Figure 16-12. PCMCIA Single-Beat Write Cycle PRS = 2 PSST = 1 PSL = 3 PSHT =1 
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Figure 16-13. PCMCIA Single-Beat Write Cycle PRS = 3 PSST = 1 PSL = 4 PSHT =3 
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Figure 16-14. PCMCIA Single-Beat Write with Wait PRS = 3 PSST = 1 PSL =3 
| PSHT =0 





16-20: MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part IV. The Hardware Interface 



















































































| | | | | | | | | | | | 
| | 
BR 
| | | | | | | | | | 
_s ] 
BG ; l 
| 
| | | | | | | | | | | | 
eens | | | | | | | | 
| | | | | | | | | | | ! 
{ | 
| AD 
| | 
| | | | | | | | | | 
| | | | | | | | | 
| | | | | | | 
———~ CS | | | | | | 
RE a So a ek es eee ee one ae 
| | | | | | | 
| | | | { | 
BURST ) | | : | 
| | | | | | | 
{ | | | | | | 
iss | | | | | : | | 
| | | | | | | 
{ | | | | | | | 
RFeEaircy si! | | | | | | | 
E1/ E2 | | | | | | { 
| | | | | | 
| | | | | { | 
ALE | ! . | ! ! 
| 
| | | | | | | | 
| | | | | 
TORD | | | | | | 
| | | | 
| | | | | | | | 
| | 
—»|PssT|<«—— PSL -_s Wait Delay —_——»| PSHT ~<— 














Figure 16-15. PCMCIA Single-Beat Read with Wait PRS = 3 PSST = 1 PSL =3 
PSHT =1 
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Figure 16-16. PCMCIA I/O Read PPS = 1 PRS = 3 PSST = 1 PSL = 2 PSHT =0 
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Figure 16-17. PCMCIA I/O Read PPS = 1 PRS = 3 PSST = 1 PSL = 2 PSHT =0 
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Figure 16-18. PCMCIA DMA Read Cycle PRS = 4 PSST = 1 PSL = 3 PSHT =0 
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Communications Processor Module 





Intended Audience 


Part V is intended for system designers who need to implement various communications 
protocols on the MPC850. It assumes a basic understanding of the PowerPC exception 
model, the MPC850 interrupt structure, as well as a working knowledge of the 
communications protocols to be used. A complete discussion of these protocols is beyond 
the scope of this book. 





Contents 


Part V descibes behavior of the MPC850 communications processor module (CPM) and the 
RISC communications processor (CP) that it contains (note that this is separate from the 
embedded PowerPC processor). 


It contains the following chapters: 


e Chapter 17, “Communications Processor Module and CPM Timers,” provides a 
brief overview of the MPC850 CPM and a detailed discussion of the clocking 
mechanisms supported. 


e Chapter 18, “Communications Processor,’ describes the RISC communications 
processor (CP), which handles the low-level communications tasks, freeing the core 
for higher-level tasks. 


¢ Chapter 19, “SDMA Channels and IDMA Emulation,” describes the two physical 
serial DMA (SDMA) channels on the MPC850 with which the CP implements 
fourteen virtual SDMA channels. 


e Chapter 20, “Serial Interface,’ describes the serial interface (SI) in which the 
physical interface to all SCCs and SMCs is implemented. 


e Chapter 21, “Serial Communications Controllers,’ describes the two serial 
communications controllers (SCC), which can be configured independently to 
implement different protocols for bridging functions, routers, and gateways, and to 
interface with a wide variety of standard WANs, LANs, and proprietary networks. 
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e Chapter 22, “SCC UART Mode,” describes the MPC850 implementation of 
universal asynchronous receiver transmitter (UART) protocol, used for sending low- 
speed data between devices. 


e Chapter 23, “SCC HDLC Mode,” describes the MPC850 implementation of HDLC 
protocol. 


e Chapter 24, “SCC AppleTalk Mode,’ describes the MPC850 implementation of 
AppleTalk, a set of protocols developed by Apple Computer, Inc. to provide a LAN 
service between Macintosh computers and printers. 


a Chapter 25, “SCC Asynchronous HDLC Mode,’ describes the asynchronous HDLC 
and IrDA use of HDLC framing techniques with UART-type characters. 


e Chapter 26, “SCC BISYNC Mode,” describes the MPC850 implementation of byte- 
oriented BISYNC protocol developed by IBM for use in networking products. 


e Chapter 27, “SCC Ethernet Mode,’ describes the MPC850 implementation of 
Ethernet protocol. : | 


e Chapter 28, “SCC Transparent Mode,’ describes the MPC850 implementation of 

! — . transparent mode (also called totally transparent mode), which provides a clear 
channel on which the SCC can send or receive serial data without bit-level 
manipulation. 


e Chapter 30, “Serial Management Controllers,’ describes two serial management 
controllers, full-duplex ports that can be configured independently to support one of 
three protocols —UART, transparent, or general-circuit interface (GCI). 


e Chapter 31, “Serial Peripheral Interface,’ describes the serial peripheral interface, 
which allows the MPC850 to exchange data between other MPC850 chips, the 
MC68360, the MC68302, the M68HC11 and M68HCO05 microcontroller families, 
and peripheral devices such as EEPROMS, real-time clocks, A/D converters, and 
ISDN devices. 


e Chapter 32, “Universal Serial Bus Controller,’ describes the MPC850 
- implementation of the universal serial bus, an industry-standard extension to the PC 
_ architecture that supports data exchange between the MPC850 and a PC host and a 
wide range of simultaneously accessible peripherals. 


e Chapter 33, “I2C Controller,’ describes the MPC850 implementation of the inter- 
integrated circuit (I?C®) controller, which allows data to be exchanged with other 
IC devices, such as microcontrollers, EEPROMS, real-time clock devices, and A/D 
converters. | - | 


e Chapter 34, “Parallel I/O Ports,’ describes the four general-purpose I/O ports—A, 
B,C, and D. Each signal in the I/O ports can be configured as a general-purpose I/ 
O signal or as a signal dedicated to supporting communications devices, such as 
SMCs and SCCs. 
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e Chapter 35,“CPM Interrupt Controller,’ describes how the CPM interrupt controller 
(CPIC) accepts and prioritizes the internal and external interrupt requests from the 
CPM blocks and passes them to the system interface unit (SIU). The CPIC also 
provides a vector during the core interrupt acknowledge cycle. 


Suggested Reading 


This section lists additional reading that provides background for the information in this 
manual as well as general information about the PowerPC architecture. 


MPC8xx Documentation 


Supporting documentation for the MPC850 can be accessed through the world-wide web 
at http://www.motorola.com/SPS/RISC/netcomm. This documentation includes technical 
specifications, reference materials, and detailed applications notes. 


PowerPC Documentation 
The PowerPC documentation is organized in the following types of documents: 


e Programming environments manuals—These books provide information about 
resources defined by the PowerPC architecture that are common to PowerPC 
processors. There are two versions, one that describes the functionality of the 
combined 32- and 64-bit architecture models and one that describes only the 32-bit 
model. 


— PowerPC Microprocessor Family: The Programming Environments, Rev 1 
(Motorola order #: MPCFPE/AD) 


— PowerPC Microprocessor Family: The Programming Environments for 32-Bit 
Microprocessors, Rev. 1 (Motorola order #: MPCFPE32B/AD) 


¢ PowerPC Microprocessor Family: The Bus Interface for 32-Bit Microprocessors 
(Motorola order #: MPCBUSIF/AD) provides a detailed functional description of 
the 60x bus interface, as implemented on the PowerPC 601™ , 603, and 604 family 
of PowerPC microprocessors. This document is intended to help system and chip set 
developers by providing a centralized reference source to identify the bus interface 
presented by the 60x family of PowerPC microprocessors. 


e PowerPC Microprocessor Family: The Programmer’s Reference Guide 
(Motorola order #: MPCPRG/D) is a concise reference that includes the register 
summary, memory control model, exception vectors, and the PowerPC instruction 
set. 


For a current list of PowerPC documentation, refer to the world-wide web at http:// 
www.mot.com/SPS/PowerPC/. 
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Conventions 

This document uses the following notational conventions: | 

Bold entries in figures and tables showing registers and parameter 
RAM should be initialized by the user. 

mnemonics Instruction mnemonics are shown in lowercase bold. 

italics Italics indicate variable command parameters, for example, bectrx. 
Book titles in text are set in italics. 

Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

rA,rB _ Instruction syntax used to identify a source GPR 

rD Instruction syntax used to identify a destination GPR 

REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
mode enable bit in the machine state register. 


X In certain contexts, such as in a signal encoding or a bit field, 
indicates a don’t care. 

n Indicates an undefined numerical value 

m7 | NOT logical operator 

& | AND logical operator 

[ OR logical operator 


Acronyms and Abbreviations 


Table 1 contains acronyms and abbreviations used in this document. Note that the meanings 
for some acronyms (such as SDR1 and DSISR) are historical, and the words for which an 
acronym stands may not be intuitively obvious. 


Table x. Acronyms and Abbreviated Terms 











Conference of Postal and Telecommunications Administrations). 


Condition/indication channel used in the GCI protocol _ 
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Table x. Acronyms and Abbreviated Terms (Continued) 


Term Meaning 


4 


ia 


Communications processor 
CPM Communications processor module 


M 


> 


m O 


Direct memory access 


DPLL Digital phase-locked loop 


DRAM Dynamic random access memory 


DSISR Register used for determining the source of a DSI exception 


Effective address 
EEST Enhanced Ethernet serial transceiver 
Erasable programmable read-only memory 
Cl General circuit interface 
GPCM General-purpose chip-select machine 
GUI Graphical user interface 


HDLC High-level data link control 


°C Inter-integrated circuit 


IDL Inter-chip digital link 


Institute of Electrical and Electronics Engineers 


IrDA Infrared Data Association 


ISDN Integrated services digital network 
JTAG Joint Test Action Group 


LIFO Last-in-first-out 


LRU Least recently used 
SB 


I~ 


Least-significant byte 


Least-significant bit 


> 
fo) 


Multiply accumulate 
MSB Most-significant byte 
Most-significant bit 
Machine state register 
Not a number 


NMSI Nonmultiplexed serial interface 


O 


S Open systems interconnection 
PCI Peripheral component interconnect 


Pulse-position modulation 
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SDLC Synchronous Data Link Control | SO 


Serial management controller . 


| rs Translation lookaside buffer 


PUPM User-programmable machine 
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= 












SDMA Serial DMA , | 
: 


[ermhslenponctansoNeomen 






Time-slot assigner 
UART Universal SS yGhiGnGUs receiverfransmitter 





USART Universal synchronous/asynchronous receiver/transmitter 
fuss | Universal serial bus 
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The communications processor module (CPM) provides a flexible and integrated approach 
to communications-intensive environments. To reduce system frequency and save power, 
the CPM has its own independent RISC communications processor (CP) that is optimized 
for serial communications. The CP services several integrated communications channels, 
performing low-level protocol processing and controlling DMA. 


The CPM supports multiple communications channels and protocols, and it has flexible 
firmware programmability. The CPM frees the core of many computational tasks in the 
following ways: 


e By reducing the interrupt rate. The core is interrupted only upon frame reception or 
transmission, instead of on a per-character basis. 


e By implementing some of the OSI layer-2 processing, which provides more core 
bandwidth for higher layer processing. 


e By supporting multibuffer memory data structures that are convenient for software 
handling. 


The MPC850 CPM is similar to the one in the MPC860 and both are derived from the CPM 
in the MC68360 QUICC; see the MC68360 Quad Integrated Communications Controller 
(QUICC) User’s Manual. 


17.1 Features 
Figure 17-1 shows a block diagram of the CPM. 
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4 Timers . 
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Peripheral Bus 


Serial Interface and Time-Slot Assigner 





Figure 17-1. CPM Block Diagram 


The following lists the CPM’s main features: 


e Communications processor (CP) 
— Dual-port RAM 
— Internal ROM 
— DMA control for all communications channels 


— Two independent DMA channels for memory-to-memory transfers or interfacing 
external peripherals | | 


— RISC timer tables 
¢ Two full-duplex serial communications controllers (SCC2 and SCC3) that support 
the following: 
— UART protocol (asynchronous or synchronous) 
— HDLC protocol 
— AppleTalk protocol 
— Asynchronous HDLC protocol 
— BISYNC protocol 
— Transparent protocol 
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— Infrared protocol (IrDA) 
— JTEEE802.3/Ethernet protocol 
Two full-duplex serial management controllers (SMCs) 


— UART protocol 

— Transparent protocol 

— GCI protocol for monitor and C/I channels (for ISDN) 
A universal serial bus (USB) controller 


Serial peripheral interface (SPI) support for master or slave modes 


Inter-integrated circuit (?-C) bus controller 


A serial interface (SI) with a time-slot assigner (TSA) that supports multiplexing of 
data from SCCs and SMCs onto one time-division multiplexed (TDMa) interface 


Four independent baud rate generators (BRGs) 

Four general-purpose 16-bit timers or two 32-bit timers 
CPM interrupt controller (CPIC) 

General-purpose I/O ports 


Figure 17-2 shows a possible MPC850 configuration for a multiprotocol application that 
supports various communications links and protocols. 
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Figure 17-2. MPC850 Application Design Example 


17.2 CPM General-Purpose Timers 


The CPM has four identical 16-bit general-purpose timers that can be cascaded into two 
32-bit timers. Note that the CPM general-purpose timers are separate and distinct from the 
RISC timer tables described in Section 18.8, ““The RISC Timer Table’ Each timer consists 
of the following: 

e Timer mode register (TMR) 

e Timer capture register (TCR) 

e Timer counter (TCN) 

e Timer reference register (TRR) 

e Timer event register (TER) 

e Timer global configuration register (TGCR). 
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Figure 17-3 is a block diagram of the CPM timers. 


General 


System Clock 
TGCR | Global Configuration Register 





: TGATE1 
Event Register | Timer 
Clock 
Generator TIN1 


Mode Register 
a Prescaler Mode Bits 


Timer Counter (TCN) 


CPM Local Bus 





Reference Register (TRR) 


| TOUT2 
Capture Register (TCR) 
Timer1 


TIN2 
TIN3 
TIN4 
Capture 
Detection 
TOUT 


Figure 17-3. CPM Timer Block Diagram 


17.2.1 Features 


The following list summarizes the main features of the CPM timers: 


e Maximum period of 10.7 seconds (at 25 MHz) 

e 40-ns resolution (at 25 MHz) 

e Programmable sources for the clock input 

e Input capture capability 

e Output compare with programmable mode for the output pin 
e Timers are cascadeable to form 32-bit timers 

e Free run and restart modes 

e¢ Functionally compatible with MC68360 timers 


17.2.2 CPM Timer Operation 


The following subsections describe the timer operation. The timer mode registers (TMRx) 
and the timer global configuration register (TGCR) mentioned in this section are described 
in Section 17.2.3, “CPM Timer Register Set.” 
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17.2.2.1 Timer Clock Source 


The clock input to the prescaler can be selected from three sources: 
e The general system clock 
e The general system clock divided by 16 


e An external source on the corresponding TINx pin 


The general system clock (GCLK2) is generated in the clock synthesizer. To save power, 
the general system clock can be divided before it leaves the clock synthesizer (slow-go 
mode). Regardless of the resulting general system clock frequency, either that frequency or 
that frequency divided by 16 can be chosen as the input to the prescaler of each timer. Also, 
an external clock source can be supplied on the TINx signal. If two 16-bit timers are 
cascaded internally into a 32-bit timer, one timer uses the clock generated by the output of 
another timer. 


The clock input source is selected by TMRx[ICLK]. The prescaler is programmed in 
TMRx[PS] and divides the clock input by values between 1 and 256; the prescaler output 
is used as an input to the 16-bit counter. The best resolution of the timer is one clock cycle 
(40 ns at 25 MHz). The maximum period is 268 435,456 cycles, which is 10.7 seconds at 
25 MHz. 


17.2.2.2 Timer Reference Count 


TMRx[FRR] (the free-run/restart bit) can be configured so that when a reference is reached 
the count either continues or begins again. When the reference value is reached, the 
corresponding TER x event bit is set and an interrupt is issued if TMRx[ORJ] = 1. Also when 
the reference value is reached, the timers 1 and 2 can output a signal on their timer output 
pins (TOUT[1—2]). The output signal can be programmed to be an active-low pulse or a 
toggle of the current output as selected by TMRx[OM] (the output mode bit). 





17.2.2.3 Timer Capture 


Each timer’s 16-bit capture register, TCR x, is used to latch the value of the counter when a 
defined transition of TINx is sensed by the corresponding input capture edge detector. The 
type of transition triggering the capture is selected by TMRx[CE]. When a capture or 
reference event occurs, the corresponding TER* event bit is set and a maskable interrupt 
request is issued to the CPIC. 


17.2.2.4 Timer Gating (Timers 1 and 2 only) 


Timers 1 and 2 can be gated or restarted by an external gate signal —TGATE1. Normal gate 
mode enables the count on a falling edge of TGATE1 and disables the count on the rising 
edge of TGATE1. This allows the timer to count conmtrona™); cepeneng, on the state of 
TGATE1. 
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Restart gate mode is like normal gate mode, but also resets the counter on the falling edge 
of TGATE1. The restart gate mode can be used for pulse interval measurement and bus 
monitoring: 


e Pulse measurement—The restart gate mode can measure a low pulse on TGATE1. 
The rising edge of TGATE]1 completes the measurement. If TGATE1 is externally 
connected to TINx, it causes the timer to capture the count value and generate a 
rising-edge interrupt. 

e Bus monitoring —The restart gate mode can detect a signal that is abnormally stuck 
low. The bus signal should be connected to TGATE1. The timer count is reset on the 


falling edge of the bus signal and if the bus signal does not go high again within the 
number of user-defined clocks, an interrupt can be generated. 


The gate function is enabled in the TMR; the gate operating mode is selected in the TGCR. 


Note that TGATE1 is internally synchronized to the system clock. However, if TGATE1 
meets the asynchronous input setup time, the counter begins counting after one system 
clock when the input clock source (TMRx[ICLK]) is internal. 


17.2.2.5 Cascaded Mode 

Timer 1 can be internally cascaded to timer 2 and timer 3 can be internally cascaded to timer 
4 to form 32-bit timers. The TGCR is used to put the timers into cascaded mode, as shown 
in Figure 17-4. 









TRR, TCR, TCN connected to D[OQ—15] f TRR, TCR, TCN connected to D[16-31] 


TRR, TCR, TCN connected to D[16-31]} 





Capture 


TRR, TCR, TCN connected to D[OQ—15] 


Clock 





Capture 


Figure 17-4. Timer Cascaded Mode Block Diagram 


If TGCR[CASx] is set, the two corresponding timers function as a 32-bit timer with a 32-bit 
TRR, TCR, and TCN. In this case, the mode registers TMR1 and TMR3 are ignored and 
TMR2 and TMR4 are used to define the mode. Similarly, the capture is controlled by TIN2 
or TIN4, and interrupts are generated by TER2 or TER4. In cascaded mode, the cascaded 
TRR, TCR, and TCN should always be accessed with 32-bit bus cycles. 
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17.2.3. CPM Timer Register Set 


The following subsections discuss the CPM timer register set. 


17.2.3.1 Timer Global Configuration Register (TGCR) 

The timer global configuration register (TGCR) contains configuration parameters used by 
all four timers. It allows simultaneous starting and stopping of any number of timers as long 
as one bus cycle is used to access TGCR. 


oase|rRzs|stes|msre| — |rhza|stPo|nsTa[casa|rnzz[sTP|asa| cu |FRz|sTPy/AST? 





Figure 17-5. Timer Global Configuration Register (TGCR) 


Table 17-1 describes the TGCR fields. 
Table 17-1. TGCR Field Descriptions 


Cascade timers. 
0 Normal operation. 
1 Timers 3 and 4 are cascaded to form a 32-bit timer. 


i 
onal 
on 

















Freeze timer x. | 
0 The corresponding timer ignores the FRZ state. 

1 Stops the corresponding timer if the MPC850 enters FRZ state. FRZ state is entered in debug mode 
as defined in Chapter 36, “System Development and Debugging.” 





Stop timer x. 

0 Normal operation. 

1 Stop the timer. This bit stops all clocks to the timer, except the U-bus interface clock allowing the 
_timer registers to be read or written. The clocks to the timer remain inactive until this bit is cleared or 

a hardware reset occurs. 


Reset timer x. 

The associated TMRx and TRRx registers should be initialized before enabling the timer with RSTx. 
0 Reset the corresponding timer. Upon clearing this bit, all associated timer registers are reset. 

1 Enable the corresponding timer if STP is cleared. 


Reserved and should be cleared. 


Cascade timers. 
0 Normal operation. 


1 Timers 1 and 2 are cascaded to form a 32-bit timer. 





Gate mode for TGATE1. Valid only if TMR1[GE] or TMR2[GE] is set. 

0 Restart gate mode. A falling TGATE1 enables and restarts the count and a rising edge of TGATE1 
disables the count. 

1 Normal gate mode. This mode is the same as 0, except the falling edge of TGATE1 does not restart 
the count value in the TCN. 
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17.2.3.2 Timer Mode Registers (TMR1—TMR4) 


The timer mode registers (TMR1I—TMR4), shown in Figure 17-6, are identical. Before 
modifying TMR«x, reset the timer by clearing TGCR[RST x]. 





0x990 (TMR1), 0x992 (TMR2), 0x9A0 (TMR3), 0x9A2 (TMR4) 
Figure 17-6. Timer Mode Registers (TMR1—TMR4) 
Table 17-2 describes the TMR fields. 
Table 17-2. TMR1—TMR4 Field Descriptions 


Prescaler vaiue. The prescaler is programmed to divide the clock input by a value between 1 and 
256. A 0x00 value divides the clock by 1; OxFF divides it by 256. 


fr. 
“J 


Capture edge and enable Interrupt. 

00 Disable interrupt on capture event; capture function is disabled. 

01 Capture on rising TINx edge only and enable interrupt on capture event. 
10 Capture on falling TINx edge only and enable interrupt on capture event. 
11 Capture on any TINx edge and enable interrupt on capture event. 


Output mode. Valid for timers 1 and 2 only. 

0 Active-low pulse on TOUT for one timer input clock cycle as defined by ICLK. Thus, TOUTx may 
be low for one general system clock period, one general system clock/16 period, or one TINx clock 
cycle period. Changes to TOUTx occur on the falling edge of the system clock. 

1 Toggle TOUTx. Changes to TOUTx occur on the falling edge of the system clock. 


m 


wok. 


N =) 


Output reference interrupt enable. 
0 Disable interrupt for reference that is reached. Does not affect an interrupt on the capture function. 
1 Enable interrupt when the reference value is reached. 


Free run/restart. 
O Free run. The timer count continues to increment after the reference value is reached. 
1 Restart. The timer count is reset immediately after the reference value is reached. 


13-14 |ICLK | Input clock source for the timer. 
00 Internally cascaded input. 
For TMR1, the timer 1 input is the output of timer 2. 
For TMR3, the timer 3 input is the output of timer 4. 
For TMR2 and TMR4, this selection means no input clock is provided to the timer. 


01 Internal general system clock. 


10 Internal general system clock divided by 16. 
11 Corresponding TINx signal (falling edge). 


Gate enable. 
0 TGATE1 is ignored. 
1 TGATE1 is used to contro} timer 1 and 2. 
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17.2.3.3 Timer Reference Registers (TRR1—-TRR4) 

Each timer reference register (TRR1I-TRR4), shown in Figure 17-7, contains the timeout’s 
reference value. The reference value is not reached until TCNx increments to equal the 
timeout reference value. 


Timeout reference value 
OxFFFF 


0x994 (TRR1), 0x996 (TRR2), 0x9A4 (TRR3), 0x9A6 (TRR4) 
Figure 17-7. Timer Reference Registers (TRR1—TRR4) 





17.2.3.4 Timer Capture Registers (TCR1—TCR4) 


Each timer capture register (TCR1—TCR4), shown in Figure 17-8, is used to latch the value 
of the counter according to TMRx[CE]. 










Latched counter value 


0x998 (TCR1), 0x99A (TCR2), 0x9A8 (TCR3), Ox9AA (TCR4) 





Figure 17-8. Timer Capture Registers (TCR1-TCR4) 


17.2.3.5 Timer Counter Registers (TCN1-TCN4) 

Each timer counter register (TCN1I-—TCN4), shown in Figure 17-9, is an up-counter. A read 
cycle to TCN1I—TCN4 yields the current value of the timer, but does not affect the counting 
operation. A write cycle to TCN1I-—TCN4 sets the register to the written value, thus causing 
its corresponding prescaler, TMRx[PS], to be reset. 


Ox99C (TCN1), Ox99E (TCN2), Ox9AC (TCN3), Ox9AE (TCN4) 
Figure 17-9. Timer Counter Registers (TCN1—TCN4) 





Note that the counter registers may not be updated correctly if a write is made while the 
timer is not running. Use TRRx to define the preferred count value. 





17-10 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part V. The Communications Processor Module 


17.2.3.6 Timer Event Registers (TER1-—TER4) 


Each timer event register (TER 1-TER4), shown in Figure 17-10, reports events recognized 
by the timers. When an output reference event is recognized, the timer sets TERx[REF] 
regardless of the corresponding TMRx[ORI]. The capture event is set only if it is enabled 
in TMR[CE]. TER1—TER4 can be read at any time and are cleared by reset. 


Writing ones clears event bits; writing zeros has no effect. Both event bits must be cleared 
before the timer negates the interrupt to the CPIC. 


SaaS RRR 


0x9B0 (TER1), 0x9B2 (TER2), 0x9B4 (TERS), 0x9B6 (TER4) 
Figure 17-10. Timer Event Registers (TER1—TER4) 


Table 17-3 describes the TER fields, 





Table 17-3. TER Field Descriptions 


ee 
Reserved, should be cleared. 


Output reference event. When set, indicates the counter reached the value in the TRR. TMR[ORI] is | 
used to enable the interrupt request caused by this event. 
CAP | Capture event. Indicates that the counter value has been latched into the TCR. TMR[CE] enables 
generation of this event. 


17.2.4 Timer Initialization Examples 


The following two initialization sequences program timer 2 to generate an interrupt every 
10 us. The first sequence uses timer 2 alone, while the second example uses timers | and 2 
in cascaded mode. Assuming a 25-MHz general system clock, an interrupt should be 
generated every 250 system clocks. 





1. Set TGCR = 0x0000 to reset timer 2. 


2. Set TMR2 = 0x001A to set the prescaler to divide by 1 and the clock source to the 
general system clock. This value also enables an interrupt when the timer reaches 
the reference count and immediately clears (restarts) the TCN for the next interrupt. 


Set TCN2 = 0x0000 to clear the timer 2 counter (default). 
Set TRR2 = OxO00FA to initialize the timer 2 reference value to 250. 
Write TER2 = OxFFFF to clear TER2 of any previous events. 


Set CIMR = 0x0004_0000 to enable timer 2 interrupts in the CPIC and initialize the 
CICR. 


7. Set TGCR = 0x0010 to enable timer 2 to begin counting. 


NN nn & W 
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To implement the same function with a 32-bit timer using timers 1 and 2, follow these steps: 


1. Set TGCR = 0x0080. Cascade timers 1 and 2 and put them in reset state. 


2. Set TMR2 = 0x001A to set the prescaler to divide by 1 and the clock source to the 
general system clock. This value also enables an interrupt when the timer reaches 
_ the reference count and immediately clears the TCN for the next interrupt. 


3. Set TMR1 = 0x0000. Enable timer 1 to use the timer 2 output as its input 
(TMR1[ICLK] = 0b00). 


4. Set TCN1 =0x0000 and TCN2 = 0x0000. Initialize the count of the combined timers 
1 and 2 to zero (TMR1 default) by using one 32-bit data move to TCN1. 


5. Set TRR1 = 0x0000 and TRR2 = OxOOFA. Initialize the reference value of the 
combined timers | and 2 to 250 by using one 32-bit data move to TRR1. 


6. Write TER2 = OxFFFF to clear TER2 of any previous events. 
7. Set CIMR = 0x0004_0000 to enable timer 2 interrupts in the CPIC and initialize the 


CICR. ! 
. 


. Set TGCR = 0x0091 to enable timers 1 and 2 to begin counting in cascaded mode. 
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Communications Processor 


Transacting with the communications peripherals on a separate bus from the PowerPC core, 
the CPM’s 32-bit communications processor (CP) handles the low-level communications 
tasks, freeing the core for higher-level tasks. The CP implements the chosen protocols using 
the serial controllers and parallel interface port and manages the data transfer through the 
serial DMA (SDMA) channels between the I/O channels and memory. It also manages 
IDMA (independent DMA) channels and contains an internal timer used to implement 
additional software timers. 


The CP’s architecture and instruction set are optimized for data communications and 
processing required by many wire-line and wireless communications standards. 


18.1 Features 
The following lists the CP’s main features: 


e Performs lower-layer protocol processing for communication channels 
e Protocol-processing microcode routines located in internal ROM 


e Optional Motorola-supplied microcode packages run from dual-port RAM (The 
microcode packages allow the addition of protocols and other enhancements.) 


e Supports general-purpose DMA using two IDMA channels 
e Supports DMA bursting for memory-to-memory IDMA 
e Performs DMA of serial data to external memory. 


e RISC timer table supports a maximum of 16 software timers 
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Figure 18-1 is a block diagram of the CP. 


INSTRUCTION STORAGE PROCESSING UNITS 





Multiplier/ 
Accumulator 





Register Cvcli 
yclic | 

| File Redundancy DMA Peripheral 
Development — Check Interface 


Support 


Arithmetic 
Logic Unit 














F Peripheral 
Service Requests © ; . ear | Bus 
e - a Figure 18-1. Communications Processor (CP) Block Diagram 


18.2 Communicating with the Core 
The CP communicates with the core in the following ways: 
e By exchanging parameters using the dual-port RAM. 


e By executing special commands that are issued by the core through the CP 
command register (CPCR). 


¢ By generating interrupts using the CPM interrupt controller (CPIC). 


e By letting the core read the CPM status/event registers at any time. 


18.3 Communicating with the Peripherals 


The CP uses the peripheral bus to communicate with the peripherals. The serial 
communications controller (SCCs)and the universal serial bus (USB) have separate receive 
and transmit FIFOs. The SCC2 receive and transmit FIFOs are 32 bytes each; the USB and 
SCC3 FIFOs are 16 bytes each. The serial management controllers (SMCs), serial 
peripheral interface (SPI), and °C are all double-buffered, creating effective FIFO sizes of 
two characters. 
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Table 18-1 shows the order in which the CP handles requests from peripherals from highest 
to lowest priority. 


Table 18-1. Peripheral Prioritization 


' See the RCCR[DRQP] description in Section 18.5.1, “RISC Controller 
Configuration Register (RCCR).” 









Priority 

























18.4 CP Microcode Revision Number 


In addition to the microcode routines located in internal ROM, the CP can execute 
protocol-enhancing microcode packages from dual-port RAM. The CP writes a part 
revision number stored in ROM to a dual-port RAM location called REV_NUM that 
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resides in the miscellaneous parameter RAM. REV_NUM determines which version of 
Motorola-supplied microcode package to use; see Table 18-2. 


Table 18-2. CP Microcode Revision Number 


2 











Reserved 


' Offset from the base of the miscellaneous parameter area (at offset Ox1CBO of the dual-port RAM). 





For the latest documentation on part/revision numbers and microcode REV_NUMs, see the 
website at http://www.motorola.com/SPS/RISC/netcomm/. 


18.5 CP Register Set and CP Commands 


The following sections describe the communications processor registers and commands. 





18.5.1 RISC Controller Configuration Register (RCCR) 


The RISC controller configuration register (RCCR), shown in Figure 18-2, tells the CP to 
run microcode from ROM or dual-port RAM and controls the CP’s internal timer. It also 
sets the IDMA request modes and priority. 


TIME| — | TIMEP DRiM|DROM! DROP ERAM 


0000_0000_0000_0000 


R/W 





Figure 18-2. RISC Controller Configuration Register (RCCR) 
Table 18-3 describes the RCCR fields. 


Table 18-3. RCCR Field Descriptions _ 
od 
a TIME 
ae oe 





Timer enable. Controls whether the CP’s internal timer sends a tick to the CP based on the value 
programmed in the timer period (TIMEP). 
0 Stop RISC timer table scanning. 
1 Start RISC timer table scanning. 


Reserved. Should be cleared. 
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Table 18-3. RCCR Field Descriptions (Continued) 


[eee mm 


2-7 TIMEP | Timer period. Controls the period of the CP’s internal timer tick. The RISC timer table are scanned 
on each timer tick. The input to the timer tick generator is the system clock divided by 1,024. The 
formula is: timer tick period = (TIMEP + 1) x 1,024 system clocks. Thus, a value of 0 stored in this 





field creates a timer tick every 1 x (1,024) = 1,024 system clocks; a value of 63 causes a tick every 
64 x (1,024) = 65,536 system clocks. 


8 DR1M_ |IDMA request 1 mode. Controls the IDMA request 1 (DREQ1) sensitivity mode. See Section 19.3.7, 
| “IDMA Interface Signals—DREQ and SDACK.” 





0 DREQ1 is edge-sensitive. 
1 DREQ71 is level-sensitive. 


IDMA request 0 mode. Controls the IDMA request 0 (DREQO) sensitivity mode. See Section 19.3.7, 
“IDMA Interface Signals—DREQ and SDACK.” 

0 DREQO is edge-sensitive. 

1 DREQO is level-sensitive. 


10-11 |DRQP_ | IDMA emulation request priority. Controls the priority of the external request signals that relate to the 
serial channels. See Section 18.3, “Communicating with the Peripherals.” 
00 IDMA requests have priority over the SCCsand USB (default). 
01 IDMA requests have priority immediately following the SCCs (option 2). 


10 IDMA requests have the lowest priority (option 3). 
11 Reserved. 


External interrupt enable. Configure as instructed in the download process of a Motorola-supplied 
RAM microcode package. 

0 DREQO cannot interrupt the CP. 

1 DREQO will interrupt the CP. 


13 SCD Scheduler configuration. Configure as instructed in the download process of a Motorola- “supplied 
RAM microcode package. 


0 Normal operation. 
1 Alternate configuration of the scheduler. 


14-15 |ERAM | Enable RAM microcode Configure as instructed in the download process of a Motorola-supplied 
microcode package. See Section 18.7.1, “System RAM and Microcode Packages.” 
00 Disable microcode program execution in the dual-port system RAM. 
01 Microcode executes from the first 512 bytes and a 256-byte extension of dual-port system RAM. 


10 Microcode executes from the first 1 Kbyte and a 256-byte extension of dual-port system RAM. 
11 Microcode executes from the first 2 Kbytes and a 512-byte extension of dual-port system RAM. 





18.6 RISC Microcode Development Support Control 
Register (RMDS) 


The RISC microcode development support control register (RMDS) determines which 
regions of the dual-port RAM can contain executable microcode. RMDS is used with 
RCCR[ERAM] to determine the valid address space for executable microcode. 
Section 18.7.1, “System RAM and Microcode Packages,” describes the partitioning of the 
dual-port system RAM. 
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0000_0000_0000_0000 = 


R/W 





Figure 18-3. RISC Microcode Development Support Control oer (RMDS) 


RMDS fields are described i in Table 18-4. 
Table 18-4. RMDS Field Descriptions 


a 


1 Microcode is also executed from the 2 Kbytes of the second half of the dual- Pon RAM with a 
512-byte extension. 


paz {= Reserved, should be cleared. | 


The PowerPC core can issue commands to control communications via the CP command 
register (CPCR). The CP commands handle special cases, such as mudanZine or stopping a 
channel, and are protocol-dependent. | 


ERAM4K | Enable RAM microcode (4K) 
0 Microcode may be executed only from the first 2 Kbytes of the dual-port RAM. 





18.6.1 CP Command Register (CPCR) 


When the core issues a command it sets CPCR[FLG]. When the command completes, the 
CP clears FLG to signal the core for the next command. The core must wait for FLG to be 
cleared before issuing another CP command. The core can, however, issue the CP reset 
command (CPCR = 0x8001) at any time, regardless of FLG. 7 





Figure 18-4. CP Command Register (CPCR) 
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Table 18-5 describes CPCR fields. 
Table 18-5. CPCR Field Descriptions 


wef mee [m 


CP reset command. Set by the core and cleared by the CP. Executing this command clears RST 
and FLG within two general system clocks. The CPM reset routine takes approximately 60 clocks, 
but CPM initialization can start immediately after this command is issued. Use RST to reset the 
registers and parameters for all the channels (SCCs, USB, SMCs, SPI, and IC) as well as the 
CPM and RISC timer table. RST does not, however, affect the serial interface or parallel I/O 


registers. 
O No reset issued. 
1 Reset issued. 


pia f= Reserved. Should be cleared. 
OPCODE | Operation code for the core- “issued CP commands. See Table 18-6. 


8-11 | CH_NUM | Channel number. Defines the specific sub-block on which the command is to operate. Some 
sub-blocks share channel number encodings if their commands are mutually exclusive. 
0000 USB 
0001 I?C/IDMA1 
001x Reserved 
0100 SCC2 


0101 SPI/IDMA2/RISC timers 
011x Reserved 

1000 SCC3 

1001 SMC1 

101x Reserved 

1100 Reserved 

1101 SMC2 

111x Reserved 


1214p Reserved. Should be cleared. 
15 |FLG Command semaphore flag. Set by the core and cleared by the CP. 
O CP is ready for a new command. 
1 CP is currently processing a command—cleared when the command is done or after reset. 


18.6.2 CP Commands 


A given CP command opcode may have different meanings, or may not apply, depending 
on which channel (sub- block) the command targets. Table 18-6 shows the opcodes by 
channel. 





Table 18-6. CP Command Opcodes 












SMC 
Opcode (UART/Trans | SMC (GCI) 2c Timer 
parent) 














0000 INIT RX AND TX {INIT RX AND TX | INIT RX AND TX |INIT RX INIT RX AND TX | INIT RX AND TX 


PARAMS 





0001 INIT RX INIT RX INIT RX INIT RX INIT RX 
PARAMS PARAMS PARAMS PARAMS PARAMS 


ooo | 0 NIT Tx PARAMS TX NIT Tx PARAMS INIT INIT Tx PARAMS| INIT Tx PARAMS| INIT Tx PARAMS TX PARAMS|—— INIT INIT Tx PARAMS| INIT Tx PARAMS| INIT TX PARAMS = f= 
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Table 18-6. CP Command Opcodes (Continued) 


SMC (GCI) 
pioo_focon [oon ror 


0101 GRACEFUL GRACEFUL 
STOP TX STOP TX 











SMC 
(UART/Trans 
parent) 









0111 CLOSE RX BD |CLOSE RX BD {CLOSE RX BD as 
1000 SET GROUP 
ADDRESS 
1010 RESET BCS GC! ABORT 
REQUEST 
CL a An ee a A 


0110 RESTART TX RESTART TX RESTART TX 
CLOSE RX BD | CLOSE RX BD 
" —_— = 
STOP IDMA nae 


Table 18-7 describes the CP commands. 





Table 18-7. CP Commands 


INIT TX AND RX | Initialize transmit and receive parameters. Initializes the CP’s temporary Tx and Rx parameters in 

PARAMS the parameter RAM to the user-defined reset values—often required when switching protocols. 

INIT RX PARAMS | Initialize receive parameters. Initializes the CP’s temporary Rx parameters in the parameter RAM to 
the user-defined reset values—often required when switching protocols. 


INIT TX PARAMS | Initialize transmit parameters. Initializes the CP’s temporary Tx parameters in the parameter RAM to 
the user-defined reset values—often required when switching protocols. 


ENTER HUNT Causes the receiver to stop and wait for a new frame—exact operation depends on the protocol 
MODE used. 


continues when RESTART TX is issued. 
GRACEFUL Graceful stop transmission. Stops the transmitting channel after the whole current frame has been 
STOP TX sent. Transmission continues when RESTART TX is issued and the ready bit is set in the next TxBD. 


RESTART TX Restart transmission. After STOP TX or GRACEFUL STOP TX, RESTART TX Starts the transmitter, which 
begins polling the R bit of the current BD. 


STOP TX Stop transmission. Stops the transmitting channel as soon as the Tx FIFO has been emptied. It 
should only be used when transmission needs to be stopped as quickly as possible. Transmission 
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Table 18-7. CP Commands (Continued) 


CLOSE RX BD Closes the current RxBD in mid-reception; reception continues using the next available BD. Use 
CLOSE RX BD to access the data buffer without waiting for the SCC to finish filling it. 


| INIT IDMA Initialize IDMA transfers. Initializes the IDMA internal CP state to the user-defined reset value. 
STOP IDMA Stop IDMA transfers. The CP terminates current IDMA transfers. 
SET TIMER Used to activate, deactivate, or reconfigure the 16 timers of the RISC timer table. 


SET GROUP Sets a hash table bit for the Ethernet logical group address recognition function. 
ADDRESS 

GCI ABORT GCI receiver sends an abort request. 

REQUEST 


GCI TIMEOUT Performs the GCI timeout function. 
RESET BCS Used in BISYNC mode to reset the block check sequence calculation. 


USB COMMAND | USB command code. The specific USB commands are described in Section 32.8, “USB CP 
Commands.” 


U Undefined. Reserved for use by Motorola-supplied RAM microcode packages. 


18.6.2.1 CP Command Examples 


To completely reset the CPM, write 0x8001 to the CPCR. After two clocks, the CPCR 
should return a 0Ox0000 value. To execute ENTER HUNT MODE on SCC2, for example, write 
0x0341 to the CPCR. While the command is executing, the CPCR returns a 0x0341 value; 
after executing, it returns 0x0340. | 




















18.6.2.2 CP Command Execution Latency 


The worst-case command execution latency for the CP is 120 clocks, while the typical 
command execution latency is about 40 clocks. 


18.7 Dual-Port RAM 


The CPM has 8 Kbytes of static RAM configured as dual-port memory, shown in 
Figure 18-5. | 
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Dual-port RAM 


a, aa, Gat Game Nee. ald 


U-Bus Addr CP Code Instr 






Address Data 
CP wCodelnstr Addr Selectors | Selectors ae U-Bus Data 
CP Data Addr CP Data 
U-Bus Addr 
Address Data 
Selectors 1,024 Bytes : Selectors 
CP Data Addr ) Parameter RAM : 


Shaded area is system RAM. Note that in this figure, the area is not contiguous memory. For an accurate 
representation of the physcial implementation, see Figure 18-6. 


Figure 18-5. Dual-Port RAM Block Diagram 


The dual-port RAM consists of 7 Kbytes of system RAM and 1 Kbyte of parameter RAM 
and is used for the following: 


e Storing parameters associated with the USB, SCCs, SMCs, SPI, ?C, and IDMAs (in 
parameter RAM only) 


e Storing the BDs (in any unused dual-port RAM area) 

e Storing buffers (in any unused dual-port RAM area or external memory) 

e Storing Motorola-supplied microcode for the CP (in system RAM only) 

e Scratchpad area for user software (in any unused dual-port RAM area) 
The dual-port RAM can be accessed ‘either by the CP or by one of two internal U-bus 
masters—the PowerPC core or an SDMA channel. The core and the SDMA channels 


access the dual-port RAM in two clocks, while the CP takes only one clock. For 
simultaneous accesses with at least one write operation, the CP is delayed by one clock. 


When the core or SDMA channel access the dual-port RAM, the data and address are 
passed through the U-bus. The CP can fetch data from the entire dual-port RAM and 
microcode instructions from portions of the system RAM. 


The controller and sub-block parameters of the parameter RAM and the optional microcode 
packages in system RAM use fixed addresses. The buffer descriptors, buffers, and 
scratchpad area, however, can be located in any unused dual-port RAM area. See 
Figure 18-6. 
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0 Kbyte 
ERAM = otf IMMR + 0x2000 


ERAM = 10 
IMMR + 0x2200 


ERAM = 11 1 Kbyte 
IMMR + 0x2400 








IMMR + 0x2800 


BD/Data 


IMMR + Ox2E00 or IMMR + 0x2F00 


ERAMA4K = 1 5 Kbyte 


6 Kbyte 
BD/Data IMMR + 0x3800 


IMMR + 0x3A00 


IMMR + 0x3C00 
Parameter RAM | 


Figure 18-6. Dual-Port RAM Memory Map 


18.7.1 System RAM and Microcode Packages 


When optional Motorola-supplied RAM microcode packages are activated, certain portions 
of the system RAM are no longer available. Depending on the memory requirements of the 
microcode package, some or all of the shaded areas of Figure 18-6 become locked. Reads 
to locked areas return all ones. The unshaded 2K-byte (non-contiguous) area of system 
RAM is always available to the user. 


The enable-RAM-microcode field of the RISC configuration register, RCCR[ERAM], 
selects the three possible configurations for microcode area sizes—first 512-byte block, 
first two 512-byte blocks, or first four 512-byte blocks. When just the first and/or second 
512-byte blocks are used for microcode, an additional 256-byte extension of system RAM 
is also locked. When all four 512-byte blocks are used for microcode, an additional 
512-byte extension of system RAM is locked. See the darker-shaded areas of Figure 18-6. 


In addition to RCCR[ERAM], RMDS[ERAMAK] (enable RAM microcode at offset 4K) 
affects the system RAM memory configuration for microcode packages. Setting 
RMDS[ERAMA4K] locks a 2-Kbyte block and a 512-byte extension (the lighter-shaded 
areas of Figure 18-6) for microcode execution. 
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18.7.2 The Buffer Descriptor (BD) 


The USB, SCCs, SMCs, SPI, IDMA, PIP, and I°C use buffer descriptors (BDs) to define the 
interface to buffers. BDs can be placed in any unused area of the dual-port RAM. 
Table 18-8 shows the general BD structure common to these controllers. 


Table 18-8. General BD Structure 


a 
ee 
[ete Yossie 
[eto otrpone 


18.7.3 Parameter RAM 


The CPM maintains a section of dual-port RAM called the parameter RAM. It contains 
parameters for USB, SCC, SMC, SPI, ?C, and IDMA channel operation. Table 18-9 shows 
the parameter RAM memory map. 


Table 18-9. Parameter RAM Memory Map 


Offset from IMMR Offset from DPRAM_base | Controller/Peripheral 





















0x3C00 1 0x1C00—0x1C7F 


0x1CCO—O0x1CFF IDMA1 






0x3D00 ‘0x1D00—0x1D7F SCC2 
0x1DBO—0x1 DBF RISC timer table 
0x1DCO—0x1DFF IDMA2 
0x3E00 0x1E00—0x1E7F SCC3 | 
Ox3FOO = 
0x1F80—0x1FBF SMC2 
0x1FCO—Ox1FFF DSP2 (Tx) 
The specific definition of each controllers’ parameter RAM is protocol dependent and is 


described in the individual protocol chapters. 





0xi1ECO—0x1EFF DSP1 (Rx) 
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18.8 The RISC Timer Table 


The CP can control a maximum of 16 timers separate and distinct from the four 
general-purpose timers and baud-rate generators of the CPM. The RISC timer table free the 
core from scanning a software timer table and are used for protocols that do not require 
extreme precision. The timers are clocked from an internal timer accessible to the CP only. 


Each pair of timers can be configured as a pulse width modulation (PWM) channel; a 
maximum of eight channels are supportable. The output of the channel 1s driven on one of 
the port B pins. 


The following list summarizes the main features of the RISC timer table: 


e Supports up to 16 timers 

* Supports up to 8 PWM channels 

e Three timer modes: one-shot, restart, and PWM 

e¢ Maskable interrupt on timer expiration 

e Programmable timer resolutions as low as 41 us at 25 MHz 
e Maximum timeout periods of 172 seconds at 25 MHz 

¢ Continuously updated reference counter 


RISC timer table operations are based on a “tick” in the CP internal timer that is 
programmed in the RCCR; see Section 18.5.1, “RISC Controller Configuration Register 
(RCCR).” The tick is a multiple of 1,024 general system clocks. The RISC timer table has 
the lowest priority of all CP operations, so if it is busy with other tasks and unable to service 
the timer during a tick interval, one or more of the timers might not be updated. This 
behavior can be used to estimate the worst-case loading of the CP; see Section 18.8.8, 
“Using the RISC Timers to Track CP Loading.” The timer table is configured using the 
RCCR, the timer table parameter RAM, and the RISC controller timer event/mask registers 
(RTER/RTMR), and by issuing SET TIMER to the CPCR. 


18.8.1 RISC Timer Table Scan Algorithm 


The CP scans the timer table once every tick of the internal CP timer. For each valid timer 
in the table, the CP decrements the count and checks for a timeout. If no timeout occurs, it 
moves to the next timer. If a timeout does occur, the CP sets the corresponding event bit in 
RTER and then checks R_TMR to see if the timer must be restarted. If it does, the CP leaves 
the timer valid bit set in the R_TMV register and resets the current count to the initial count; 
otherwise, the CP clears R_TMV. Once the timer table is scanned, the CP updates 
TM_CNT and stops working on the timer table until the next scan tick. 


If SET TIMER is issued, the CP makes the appropriate modifications to the timer table and 
parameter RAM, but does not scan the timer table until the next tick of the internal CP 
timer. (Using SET TIMER properly synchronizes the timer table modifications to the 
execution of the CP.) 
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18.8.2 The SET TIMER Command 


Issued to the CP command register (CPCR), the SET TIMER command is used to enable, 
disable, and configure the 16 timers in the RISC timer table. Set up the TM_CMD value in 
the RISC timer table parameter RAM before writing 0x0851 to the CPCR. 


18.8.3 RISC Timer Table Parameter RAM and Timer Table Entries 


Two areas of dual-port RAM are used for the RISC timer table—RISC timer table 
parameter RAM and the RISC timer table entries; see Figure 18-7. 





Timer Table Base Pointer 


DPRAM_BASE + 0x1DB a 
~~ ParameterRAM 









Figure 18-7. RISC Timer Table RAM Usage 


The RISC timer table parameter RAM holds the general timer parameters. Table 18-10 
shows its memory map. 


Table 18-10. RISC Timer Table Parameter RAM Memory Map 


oa wae [wan] an 
TM_BASE | Hword | RISC timer table base address. The actual timers are a small block of memory in the 
dual-port RAM. TM_BASE is the offset from the beginning of the dual-port RAM where 
that block of memory resides. Four bytes must be reserved at the TM_BASE for each 
timer used, (64 bytes if all 16 timers are used). If fewer than 16 timers are used, timers 
should be allocated in ascending order to save space. For example, 8 bytes are 


required if two timers are needed and RISC timers 0 and 1 are enabled. 


TM_BASE should be word-aligned. 

R_TMR Hword | RISC timer mode register. Only the CP uses this register to store the mode of the 
timer, one-shot (0) or restart (1). Do not modify this register directly; it is modified 
indirectly via TM_CMD and the SET TIMER command. 













RISC timer table pointer. Only the CP uses this register to point to the next timer 
accessed in the timer table. Do not modify this register. 
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Table 18-10. RISC Timer Table Parameter RAM Memory Map (Continued) 


ea | new [mle 


R_TMV Hword | RISC timer valid register. Only the CP uses this register to determine whether a timer 

is currently enabled. If the corresponding timer is enabled, a bit is 1. Do not modify this 
_ 
- 


register directly; it is modified indirectly via TM_CMD and the SET TIMER command. 
' From timer base address (IMMR + 3DB0) 


18.8.3.1 RISC Timer Command Register (TM_CMD) 
Figure 18-8 shows the TM_CMD register. 


















RISC timer command register. Used as a parameter location when SET TIMER is issued. 
Write this location prior to issuing SET TIMER. The bits of this register are defined in 
Section 18.8.3.1, “RISC Timer Command Register (TM_CMD) 






RISC timer internal count. Tick counter that the CP updates after each tick or after the 
timer table is scanned. It is updated if the CP’s internal timer is enabled, regardless of 
whether any of the 16 timers are enabled, and it can be used to track the number of 
ticks the CP receives and responds to. 








Timer Period 


Figure 18-8. RISC Timer Command Register (TM_CMD) 
Table 18-11 describes TM_CMD fields. 
Table 18-11. TM_CMD Field Descriptions 


ee 
Valid. When set, this bit enables the timer. It should be cleared to disable the timer. 
Ro | Restart. Should be set for an automatic restart or cleared for a one-shot timer operation. 













Pulse width modulation mode. Set for PWM operation; see Section 18.8.5, “PWM Mode.” 


Reserved. Should be cleared. 
12-15 A value from 0-15 signifying which timer to use—an offset into the timer table entries. 


16-31 Timer Period | The 16-bit timeout count of the timer. The maximum value is 65,536 and is programmed by 
writing 0x0000 to the timer period. 
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18.8.3.2 RISC Timer Table Entries | | 

The 16 timers are located in the block of memory pointed to by TM_BASE; each timer 
occupies 4 bytes. The first half-word holds the initial timer count taken from 
TM_CMD[Timer Period] when SET TIMER is executed; the next half-word is the current 
timer count that is decremented (until it reaches zero). Do not modify the table entries 
directly; instead, use the SET TIMER command to reinitialize table values. 


18.8.4 RISC Timer Event Register (RTER)/Mask Register (RTMR) 


The RISC timer event register (RTER), shown in Figure 18-9, reports period timeout 
events, which generate maskable interrupts. RTER bits are cleared by writing ones; writing 
zeros has no effect. 


0000 _0000_0000_0000 
R/W 





| Ox9D6 (RTER); Ox9DA (RTMR) 
Figure 18-9. RISC Timer Event Register (RTER)/Mask Register (RTMR) 


The. RISC timer mask register (RTMR), also shown in Figure 18-9, is used to enable 
interrupts generated in the RTER. If an individual timer’s RTMR bit is set, the timer’s 
RTER interrupt is enabled. If an RTMR bit is cleared, the corresponding interrupt in the 
RTER is masked. 


The RISC timer table bit in the CPM interrupt mask register, CIMR[RTT], described in 
Section 35.5.3, “CPM Interrupt Mask Register,’ acts as a global RISC timer interrupt mask. 
Clearing CIMR[RTT] masks all RISC timer interrupts, regardiess of RTMR. 


18.8.5 PWM Mode 
Designated pairs of timers can be used to generate PWM waveforms penOuar port B. A 
maximum of eight channels are supported. 
The first timer (even numbered) determines the duty cycle of the waveform: 
e Program TM_CMD [Timer Period] to be the high period of the waveform. 
e Set TM_CMD[V, PWM]. 
The second timer (odd numbered) determines the overall period: 
e Program TM_CMD[Timer Period] to be the period of the whole waveform. 
e Set TM_CMD[V, R] and clear TM _CMD[PWM]. | 
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Table 18-12 shows the port B pin assignments for PWM mode. The respective port B pins 
should be configured as general-purpose outputs; see Section 34.3, “Port B-” 


Table 18-12. PWM Channel Pin Assignments 


Timer Pairs 


Timer 10, 11 
Timer 12,13 
Timer 14,15 porary 





18.8.6 RISC Timer Initialization 


Follow these steps to initialize the RISC timers: 


1. 


Program RCCR[TIMEP] to the preferred internal timer tick interval, which 
determines the scan interval for the entire timer table. The timer enable bit, 
RCCR[TIME], is normally set at this time; however, it can be set later if all RISC 
timers must be synchronized. | 


. Determine the maximum number of timers to be located in the timer table. 


Configure TM_BASE to point to a location in the dual-port RAM with 4 x N bytes 
available, where N is the number of timers used. If N is less than 16, use timer 0 
through timer N—1 to save space. 


. Clear TM_CNT to show how many ticks have elapsed since the CP internal timer 


was enabled (optional). 


4. Clear the RTER, if it is not already cleared. Writing OxXFFFF clears this register. 


Configure the RTMR to enable the timers that need to generate interrupts. A one 
enables interrupts. 


Set CIMR[RTT] to generate interrupts to the system. The CPIC may require 
initialization not mentioned here; see Chapter 35, “CPM Interrupt Controller.” 


Configure TM_CMD. At this point, determine whether a timer is to be enabled or 
disabled, one-shot or restart, and what its timeout period should be. If the timer is 
being disabled, all parameters besides the timer number are ignored. 


8. Issue SET TIMER by writing 0x0851 to the CPCR. 
9. Repeat the steps 7 and 8 for each timer to be enabled or disabled. 
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As an example, the following sequence demonstrates how RISC timer 0 is initialized to 
generate an interrupt approximately every second using a 25-MHz general system clock: 


1. Write RCCR[TIMEP] with 0b111111 to generate the slowest timer. This value 
generates a table scan tick every 65,536 clocks, which is every 2.6 ms at 25 MHz. 


2. Configure TM_BASE to point to a location in the dual-port RAM with 4 bytes 
available. Assuming that the beginning of dual-port RAM 1s available, write OxO000 
to TM_BASE. : 


3. Write 0x0000 to TM_CNT to see how many ticks have elapsed since the CP internal 
timer was enabled (optional). 


4. Write OxFFFF to the RTER to clear any previous events. 
5. Write 0x0001 to the RTMR to enable RISC timer 0 to generate an interrupt. 


6. Write 0x0002_0000 to the CPM interrupt mask register so the RISC timers will 
generate a system interrupt. Initialize the CPM interrupt configuration register. 

7. Write OxCO00_QEE6 to TM_CMD. This enables RISC timer 0 to timeout after 3,814 
(decimal) ticks. The timer automatically restarts after it times out. 

8. Write 0x0851 to the CPCR to issue SET TIMER. 


9. Set RCCR[TIME] to start RISC timer table scanning. 


18.8.7 RISC Timer Interrupt Handling 


The following sequence shows what normally occurs within an interrupt handler for the 
RISC timer table: 


1. Once an interrupt occurs, read the RTER to see which timers have caused interrupts. 
The RISC timer event bits are usually cleared at this time. 


2. Issue any additional SET TIMER commands now or later, as preferred. Nothing needs 
to be done if the timer is automatically being restarted for repetitive interrupts. 


3. Clear CISR[RTT]. 


4. Execute the rfi instruction. 


18.8.8 Using the RISC Timers to Track CP Loading 


The RISC timers can be used to track CP loading. The following sequence is a method for 
using the 16 RISC timers to determine if the CP ever exceeds the 96% utilization level 
during a scan tick interval. Removing the timers adds a 4% margin to the CP’s utilization 
level, but an aggressive user can use this technique to push the CP performance to its limit. 
Incorporate the following steps to the standard initialization sequence: 


1. Program RCCR[TIMEP] to 0b001111 for a table scan tick of 16 x (1,024) = 16,384. 
2. Disable RISC timer table interrupts, if preferred. | 


3. Using SET TIMER, initialize all 16 RISC timers to have a timer period of 0x0000, 
which corresponds to 65,536. 
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4. Program one of the four general-purpose timers to increment once every tick. The 
general-purpose timer should be free-running and have a timeout of 65,536. 


5. After a few hours of operation, compare the general-purpose timer to the current 
count of RISC timer 15. If the difference between them exceeds two ticks, the CP 
has, during some scan tick interval, exceeded the 96% utilization level. Note that 
when comparing timer counts, the general-purpose timers are up-counters, while 
RISC timers are down-counters. 
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Chapter 19 
SDMA Channels and IDMA Emulation 


The CPM controls two physical serial DMA (SDMA) channels on the MPC850. Using the 
two physical channels, the CP implements fourteen virtual SDMA channels, each dedicated 
to a serial controller transmitter or receiver—two for the USB, four for the full-duplex 
SCCs, and the remaining eight for the SPI, I7C, and the two SMCs. The CPM also emulates 
two general-purpose independent DMA (IDMA) channels for memory/memory and 
peripheral/memory transfers using the two physical SDMA channels. 


19.1 SDMA Channels 


Data fromthe USB, the SCCs, SMCs, SPI, and I°C can be routed to external memory 
(path 1) or the internal dual-port RAM (path 2), as shown in Figure 19-1. On a path | 
access, the SDMA channel must acquire both the U-bus and the external system bus. On a 
path 2 access, the data transfer occurs only on the U-bus, independent of the external 
system bus unless the SIU is configured in show-cycles mode. Thus, in normal operation, 
U-bus transfers occur simultaneously with external system bus operations. 


De Are yt ce Ng mee Peremtig Me ead reg wee ae Seg Sree Om ress Merend S Coemrty eet eee Skye ara Geen me | epee) eee ER Cape tenet PN reads eae ty Cone eet ge, Vg oe re, Ee Bea rigt es ogee rd wy waree™ ch Wa ey et ee CN 
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Figure 19-1. MPC850 SDMA Data Paths 
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19.1.1 SDMA Transfers 


Each SDMA channel can be programmed to output a 3-bit function code that identifies the 
channel currently accessing memory. The SDMA channel can implement true little-endian, 
PowerPC little-endian, or big-endian byte ordering when accessing buffers. These features 
are programmed in the receive and transmit function code registers associated with each 
serial controller and within an IDMA channel’s BD; see Section 19.3.4, “IDMA Buffer 
Descriptors (BD).” 


If a bus error occurs when the SDMA conducts an access, the CP generates a unique 
interrupt in the SDMA status register (SDSR). The interrupt service routine reads the 
SDMA address register (SDAR) to determine the address that the bus error occurred on. 
The individual channel that caused the bus error can be found by reading the Rx and Tx 
internal data pointers from the protocol-specific parameter RAM of the serial controllers. 
If an SDMA bus error occurs, all CPM activity ceases and the entire CPM must be reset in 
the CPM command register (CPCR); see Section 18.6.1, “CP Command Register (CPCR).” 


19.1.2 U-Bus Arbitration and the SDMA Channels 


~The SDMA channels, I-cache, D-cache, and SIU all contend for the U-bus as internal 


masters with their relative priorities determined by an arbitration ID. The user can adjust 
the SDMA bus arbitration priority, but the other internal masters have fixed arbitration IDs; 
see Section 19.2.1, “SDMA Configuration Register (SDCR).’ All 14 virtual SDMA 
channels share the same arbitration ID, and thus have the same priority relative to the other 
internal masters. See Table 19-1. 


Table 19-1. U-Bus Arbitration IDs 


7 (highest priority) 






SDMA (SDCR[RAID]=0b00) 


an eel 
yan eee 
ae 











SDMA (SDCRIRAID]=0b10) 
SDMA (SDCR[RAID]=0b1 1) 


Notes: DRAM refresh normally has a U-bus arbitration level of 0 (losing ties to the PowerPC core). 
However, if four refresh periods expire without servicing, the arbitration level is promoted to 7. 

An external request loses ties to an internal request or DRAM refresh request with the same 
arbitration ID. For example, if SIUMCR[EARP] is 4, the external master has priority over the I-cache 
but not over the D-cache. 


Once an SDMA channel obtains the external system bus, it remains master for the whole 
transaction—a byte, half-word, word or burst transfer—before relinquishing the bus. This 
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feature, in combination with the zero-clock arbitration overhead ee by the U-bus, 
increases bus efficiency and lowers latency. 


To minimize the latency associated with slower, character-oriented protocols, an SDMA 
writes each character to memory as it arrives without waiting for the next character, and 
always reads using 16-bit half-word transfers. A transfer may take multiple bus cycles if the 
memory provides a less than 32-bit port size. An SDMA uses back-to-back bus cycles for 
the entire transfer—4-word bursts, 32-bit reads, and 8-, 16-, or 32-bit writes—before 
relinquishing the bus. For example, an SDMA channel reading a 32-bit word from a 16-bit 
memory takes two consecutive bus cycles. 


An SDMA steals cycles with no arbitration overhead unless an external device is bus 
master. Figure 19-2 shows an SDMA stealing a cycle from an internal bus master. 


Other Cycle ) SDMA Cycle Other Cycle : 











‘SDMA inieiany 
Requests the Bus 


Figure 19-2. SDMA U-Bus Arbitration (Cycle Steal) 


19.2 SDMA Registers 


All SDMA channels share one configuration register (SDCR), a status register (SDSR), a 
mask register (SDMR), and a read-only, address register (SDAR). The configuration of 
each serial controller also affects their dedicated SDMA channels’ behavior. The following 
sub-sections describe the SDMA registers. 


19.2.1 SDMA Configuration Register (SDCR) 


The SDMA configuration register (SDCR) configures all 14 virtual SDMA channels. It 
controls the channels’ U-bus priority level and freeze-signal (FRZ) behavior. It 1s always 
read/write in supervisor mode, even though writing to the SDCR is not recommended 
unless the CPM is disabled. Figure 19-3 shows the register format. 
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Figure 19-3. SDMA Configuration Register (SDCR) 











Table 19-2 describes the SDCR bit settings. 
Table 19-2. SDCR Bit Settings 


Reserved. Should be cleared. . 
17 FRZ | Freeze. Recognize or ignore the freeze signal. If configured to respond to the freeze signal, the 
SDMA controller negates BR until freeze is negated or a reset occurs. 


0 SDMA channels ignore the freeze signal. 
1 SDMA channels respond to a freeze on the next bus cycle. » 


18-29 Reserved. Should be cleared. 


30-31| RAID | RISC controller (CP) arbitration ID. Sets the SDMAs’ U-bus arbitration priority level. Should be 
programmed to 0b01, priority level 5, for typical applications. (See Table 19-1 above.) 
00 Priority level 6 (BR6). . 
01 Priority level 5 (BR5) (normal operation). 


10 Priority level 2 (BR2). 
11 Priority level 1 (BR1). 





19.2.2 SDMA Status Register (SDSR) 


Shared by all SDMA channels, the SDMA status register (SDSR) reports bus errors. When 
the SDMA controller recognizes a bus error, it sets the corresponding event bit in the SDSR. 
SDSR bits are cleared by writing ones; writing zeros has no effect. Figure 19-4 shows the 
register format. 










0000_0000 
IMMR + 0x908 


Figure 19-4. SDMA Status Register (SDSR) 
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Table 19-3 describes the SDSR bit settings. 
Table 19-3. SDSR Field Descriptions 


fone [rene [nen 
SBER |SDMA channel bus error. Indicates an error caused the SDMA channel to terminate during a read or 
write cycle. The SDMA bus error address can be retrieved from the SDMA address register (SDAR). 
a 


19.2.3 SDMA Mask Register (SDMR) 


The read/write SDMA mask register (SDMR) has the same bit format as SDSR; see above 
Figure 19-4. If a bit in the SDMR is set, the corresponding interrupt in the SDSR is enabled; 
if the bit is cleared, the corresponding interrupt is masked. Reset clears SDMR. Its internal 
address TMMR offset) is Ox90C. 









19.2.4 SDMA Address Register (SDAR) 


The 32-bit, read-only SDMA address register (SDAR) holds the current system address 
being accessed and is used to diagnose an SDMA bus error. SDAR 1s undefined at reset. Its 
internal address (IMMR offset) is 0x904. 


19.3 IDMA Emulation 


The CPM can be configured to emulate two general-purpose independent DMA (IDMA) 
channels using the two physical SDMA channels. In IDMA emulation mode, the user 
specifies a memory/memory or peripheral/memory transfer as if using dedicated DMA 
hardware. 


IDMA uses two addressing modes—dual-address and single-address. In IDMA 
dual-address transfers, data is read into internal storage, packed onto the bus, and then 
written to the destination. Dual-address transfers can take several bus cycles depending on 
the peripheral’s port size. In contrast, single-address (fly-by) IDMA bypasses internal 
storage, transferring data directly between memory and a peripheral in a single bus cycle. 
See Section 19.3.8, “IDMA Transfers —Dual-Address and Single-Address.” 


The IDMA controller supports two buffer handling modes—auto-buffering, and 
buffer-chaining. In buffer-chaining, an IDMA moves a connected series of BDs called a 
chain without interruption. Auto-buffering allows a buffer chain to be repeatedly 
transferred in a loop without user intervention. See Section 19.3.4.2, “Auto-Buffering and 
Buffer-Chaining.” 


Single-buffering is a special, low-latency IDMA transfer mode optimized for transferring 
one buffer from a peripheral to memory. This low-overhead mode uses single-address 
(fly-by) burst transfers. Note that single-buffering is available only on IDMA1. This mode 
also remaps the IDMAI channel parameter RAM. See Section 19.3.9, “Single-Buffer 
Mode on IDMA1 —A Special Case.” 
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Note that DREQO is the DMA request for IDMA1, and DREQ1 is the DMA request for 
IDMA2. 


19.3.1 IDMA Features 
The following is a list of IDMA’s main features: 
«© Two independent, fully programmable DMA channels 
e Dual-address or single-address transfers with 32-bit address and data capability 
e 32-bit byte transfer counters allow for 4-Gbyte buffers 
e Byte, half-word, word, or 4-word burst quantities for transfers 


e 32-bit, byte-addressable buffer pointers auto-increment for memory accesses and 
remain constant for peripheral accesses | 


e Byte-packing and unpacking algorithms use the absolute minimum number of bus 
cycles required during dual-address transfers 


¢ All bus-termination modes, such as TA, TEA, and BI, are supported 
8 DMA handshaking for cycle-steal and burst transfers 
¢ Two buffer handling modes —auto-buffering and buffer-chaining 


e Optimized, low-overhead single-buffer mode for peripheral-to-memory transfers on 
IDMAI1 


e The MPC850’s chip-select and wait-state generation logic can be used with IDMA. 


19.3.2 IDMA Parameter RAM 


Both IDMA channels have a dedicated portion of dual-port RAM for channel parameters. 
Table 19-4 shows the memory map. Note that in the special single-buffer mode, the IDMA1 


parameter RAM map changes; see Section 19.3.9, “Single-Buffer Mode on IDMA1—A 
Special Case.” . 


Table 19-4. IDMA Parameter RAM Memory Map _ 


fomer'[ vane [wan [een 
Hword |IDMA BD base address. Defines the base address of the area in dual-port RAM 

set aside for this channel's BD table. It is an offset from the beginning of dual-port 

| RAM. Note that IBASE should be burst-aligned (divisible by 16). 


Hword | DMA channel mode register. See Section 19.3.3.1, “DMA Channel Mode 
Registers (DCMR).” 
0x04 SAPR Word | Source data pointer (internal-use). Points to the next source byte to be read. The 
CP initializes SAPR to the BD’s source buffer pointer and increments it | 
automatically if the source is memory (DCMR[S/D] = Obx0). 
DAPR Destination data pointer (internal-use). Points to the next destination byte to be 























written. The CP initializes DAPR to the BD’s destination buffer pointer, and 
increments it automatically if the destination is memory (DCMR[S/D] = Ob0x). 
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Table 19-4. IDMA Parameter RAM Memory Map (Continued) 


IBPTR | Hword |Current IDMA BD pointer. If the IDMA channel is idle, IBPTR points to the next 








valid BD in the table. After a reset, or when the end (wrap bit) of the BD table is 
reached, the CP wraps IBPTR back to IBASE. 


WRITE_SP Internal-use _ 
S_STATE Internal state 

ITEMP 4 Words | Temp data storage _ a 
D_STATE Reserved. Internal state used by CP 


Notes: Boldfaced items must be initialized by the user before enabling an IDMA channel. The remaining 
parameters are used by the CP only. 
































| IDMA1 base = IMMR + 0x3CCO 
IDMA2 base = IMMR + 0x3DCO0 


19.3.3 IDMA Registers 


Each IDMA channel has a DMA channel mode register (DCMR), an IDMA status register 
(IDSR) and corresponding mask register (IDMR) that contain global channel parameters. 


19.3.3.1 DMA Channel Mode Registers (DCMR) 


Located in each IDMA’s parameter RAM, the DMA channel mode registers (DCMR) 
configure the peripheral port size, the source and destination type of the transfer, and the 
address mode (cycle mode) of the IDMA channels. Figure 19-5 shows the register format. 


IDMAx Base + 0x02 
Figure 19-5. DMA Channel Mode Register (DCMR) 
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Table 19-5 describes DCMR fields. 


Table 19-5. Ls Field Descriptions 


Reserved. Should be cleared. 


Peripheral port size. Determines the operand transfer size per DREQx assertion for 
peripheral/memory transfers, but not for memory/memory transfers. (For memory/memory 
transfers the size is determined only by address alignment and the amount of data remaining to be 
transferred.) 

00 Word length. 

01 Half-word length. 

10 Byte length. 

11 Reserved. 

Note that the memory port size is transparent to the IDMA. The SiU emulates a 32-bit port size 
regardless of the actual memory port size. 
































11-12 


13-14 





Source/destination. Defines the source and destination—memory or peripheral. For memory 
accesses, the CP automatically increments the address. 

00 Read from memory; write to memory. 

01 Read from peripheral; write to memory. 

10 Read from memory; write to peripheral. 

11 Reserved. 





Single-cycle. Selects single- or dual-cycle mode 
0 Dual-cycle (dual-address) mode. 
1 Single-cycle (single-address) mode. 


19.3.3.2 IDMA Status Registers (IDSR1 and IDSR2) 

The IDMA status registers (IDSR1 and IDSR2) report transfer events. When the IDMA 
controller recognizes an event, it sets the corresponding event bit in the IDSR. IDSR bits 
are cleared by writing ones; wane zeros has no effect. Figure 19-6 shows the register 
format. | 


IMMR + 0x910 (IDSR1); 0x918 (IDSR2) 
Figure 19-6. IDMA Status Registers (IDSR1/DSR2) 
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Table 19-6. IDSR1ADSR2 Field Descriptions 


Table 19-6 describes the IDSR fields. 

os 
a 
is [AD Auxiliary done. Set after processing a BD that has its | bit (interrupt) set. 


inet Buffer chain done. Indicates IDMA transfer termination. Set after servicing a BD that has its L bit 


(last) set, regardless of the | bit setting. 
19.3.3.3 IDMA Mask Registers (IDMR1 and IDMR2) 
The read/write IDMA mask registers (IDMR1 and IDMR2) have the same format as IDSR, 
shown in Figure 19-6. If an IDMR bit is set, the corresponding interrupt is enabled in 


IDSRn; if it is cleared, the corresponding interrupt is masked. Reset clears IDMR. 
IDMR1’s internal address (MMR offset) is 0x914; IDMR2’s is Ox91C. | 













Out of buffers. Indicates that the IDMA channel has no valid BDs left in the BD table. 





19.3.4 IDMA Buffer Descriptors (BD) 


An IDMA buffer descriptor contains the specific transfer information needed for its buffer. 
IDMA BDs contain a status-and-control field, the function code registers, the buffer length, 
and the source and destination buffer pointers. The BDs are grouped together in contiguous 
dual-port RAM to form a standard BD table; see Figure 19-7. 


IDMAx BD Base 
Address (IBASE) 












Destination Device or 
Buffer 


Source Device or 
Buffer 0 


Destination Device or 
Buffer 1 


Source Device or 
Buffer 1 


Destination Device or 
Buffer 2 


Source Device or 
Buffer 2 


a 4 4 
ec5o = 
oO 


| 
3 
a 





Destination Device or 
Buffer n 


Source Device or 
Buffer n 











Figure 19-7. IDMAx Channel’s BD Table 
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An IDMA descriptor breaks down as follows: 
e The half word at (offset + 0) is the status-and-control field. 


e The byte at (offset + 2) is the destination function code register (DFCR). See 
Section 19.3.4.1, “Function Code Registers ——SFCR and DFCR.” 


e The byte at (offset + 3) is the source function code register (SFCR). See 
Section 19.3.4.1, “Function Code Registers —SFCR and DFCR.”’ 


e The word at (offset + 4) is the buffer length, containing the number of bytes for 
transfer. It must be greater than zero. 


e The word at (offset + 8) points to the beginning of the source buffer in internal or 
external memory. 


— When the source is a peripheral, this field is ignored in single-address mode. In 
dual-address mode, this field contains the peripheral address. 


e The word at (offset + OxC) points to the beginning of the destination buffer in 
internal or external memory. 


— When the destination is a peripheral, this field is ignored in single-address mode. 
In dual-address mode, this field contains the peripheral address. 


Figure 19-8 shows the descriptor structure. 


Buffer Length 


Source Buffer Pointer 


Destination Buffer Pointer 





Figure 19-8. IDMA Buffer Descriptor Structure 
Table 19-7 describes an IDMA descriptor’s status-and-control field. 


Table 19-7. IDMA BD Status and Control Bits 


Valid. Ready for processing. 

0 invalid. Not ready for transfer. The user can write to this descriptor and its buffer. When 
buffer-chaining, the CP clears the V bit after the buffer has been transferred. 

1 Valid for transfer. The user should not write to this descriptor or its buffer once the V bit is set. 

Note: When an error condition is detected, the CP clears the V bit. 


Reserved - | 
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Table 19-7. IDMA BD Status and Control Bits (Continued) 


Wrap. Marks the end of the BD table. 

0 Not the last descriptor in the BD table. 

1 Last descriptor in the BD table. After this descriptor has been processed, the CP wraps the 
current BD pointer (IBPTR) back to the top of the BD table (IBASE). 


Interrupt. Enable the maskable auxiliary-done (AD) interrupt. 
0 IDSR[AD] is not flagged after this BD is processed. 
1 IDSR[AD] is flagged after this BD is processed. 


Last. Marks the end of a buffer chain and enables the maskable DONE interrupt. 

0 Not the last BD of a buffer chain. 

1 Last BD of a buffer chain. When the transfer count is exhausted, IDSR[DONE] is flagged, 
regardless of the | bit. 


Reserved 


Continuous mode. Selects buffer-chaining or auto-buffering; see Section 19.3.4.2, “Auto-Buffering 

and Buffer-Chaining.” 

0 Normal mode (buffer-chaining). The CP clears the V bit after this descriptor is processed. 

1 Continuous mode (auto-buffering). The CP does not clear the V bit after this descriptor is 
processed. 


Reserved 


19.3.4.1 Function Code Registers—SFCR and DFCR 


The user programs an IDMA channel’s source and destination function code registers 
(SFCR and DFCR) with separate 3-bit function codes to tag the channel’s source and 
destination accesses. The function code registers also determine the byte-ordering 
convention. Figure 19-9 shows the register format. 





a 


DFCR is at offset 0x02. SFCR is at offset 0x03. 
Figure 19-9. Function Code Registers—SFCR and DFCR 








MOTOROLA Chapter 19. SDMA Channels and IDMA Emulation 19-11 


Part V. The Communications Processor Module 


Table 19-8 describes the function code register bit settings. © 
Table 19-8. SFCR and DFCR Field Descriptions 
fae[mme fn 
oe [= [feseved Stoustwoeeed 
i Byte ordering. Set BO to select the required byte ordering for the buffer. If BO is changed on-the-fly, 
it takes effect at the beginning of the next frame (Ethernet, HDLC, and transparent) or at the 





beginning of the next BD. See Appendix A, “Byte Ordering.” 
00 Reserved 
01 PowerPC little-endian. 


1x Big-endian or true little-endian. 


count code AT[O—3] = OxF replaces the user-defined function code signaling the end of transfer to 
the peripheral. 





5-7 | AT[1-3] | Address type 1-3. Holds the function code for an IDMA channel memory access. Note AT[O] is 
driven high to identify the access as a DMA type. Note that for the last IDMA cycle, the terminal 


19.3.4.2 Auto-Buffering and Buffer-Chaining 


Buffer-chaining is designed to move large amounts of noncontiguous blocks of data. Even 
though each block needs a separate BD, the BDs can be chained together and serviced as a 
group. Auto-buffering is used to repeatedly service a BD chain. Note that a chain can range 
from one BD to the whole BD table in length. 


Setting the CM bit (continuous mode) in a BD’s status-and-control field enables 
auto-buffering; clearing the CM bit enables buffer-chaining (normal mode). The CM bit 
must be explicitly programmed for each BD. 


When auto-buffering, the descriptor’s V bit will not be cleared after CPM processing — the 
BD remains valid for immediate transfer as the current BD pointer cycles through the table. 
When buffer-chaining, the CPM invalidates the current BD after processing to allow the 
user (the core) to safely manipulate the contents of the buffer and modify its BD. Note that 
the V bit behavior is the only difference between auto-buffering and buffer-chaining — 
auto-buffering can be thought of as continuous buffer-chaining. One use of auto-buffering 
is for continuous monitoring of an external instrument, such as an A/D converter. 


Set the L bit (last) in the status-and-control field to mark the last BD of a chain. When the 
CPM completes a chain, it flags IDSR[DONE], triggering a maskable interrupt to the core. 
The I bit G@ndividual BD interrupt) behavior is independent of the L bit—the user may 
disable individual BD interrupts (and/or mask them) for multi-buffer chains. 
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19.3.5 IDMA CP Commands 
The core issues the following IDMA commands to the CP: 


e INIT IDMA—The CPM resets the IDMA internal state. The current BD pointer is 
reset to the top of the BD table (BASE). 


e STOP IDMA—The CP terminates current IDMA transfers. IDSR[DONE] ts set, and 
the current BD is closed. If the destination is memory, the IDMA internal storage 
buffer is transferred before termination, regardless of the source. If the destination 
is a peripheral, the internal storage buffer is flushed and the transfer terminated 
without writing to the peripheral. At the next request, the next BD in the table is 
processed. 


See Section , “The PowerPC core can issue commands to control communications via the 
CP command register (CPCR). The CP commands handle special cases, such as initializing 
or stopping a channel, and are protocol-dependent.,’ for the mechanics of issuing CP 
commands. 


19.3.6 IDMA Channel Operation 


An IDMA channel operation consists of the following events—IDMA channel 
initialization, data transfer, and block termination. In the initialization phase, the core loads 
the global IDMA channel information into the IDMA parameter RAM, builds the IDMA 
BD table, and starts the channel. In the transfer phase, the CPM accepts a transfer request, 
reads the transfer-specific information from the current BD into the IDMA parameter 
RAM, programs the physical SDMA channel, and provides addressing and bus control. The 
termination phase begins when the transfer byte count reaches zero (or a bus error occurs). 
The CPM then interrupts the core (unless masked), and the current BD pointer moves to the 
next BD in the table. 


To begin a block transfer, initialize the IDMA registers, and build the IDMA BDs with 
information describing the data block, device type, and other special control options. See 
Section 19.3.2, “IDMA Parameter RAM,’ and Section 19.3.5, “IDMA CP Commands.” 


19.3.6.1 Activating an IDMA Channel 


IDMA requests are generated externally via the DREQ signals. (There is no mechanism for 
generating internal IDMA requests.) After initializing the IDMA parameter RAM and the 
BD table, enable the DREQ signal by setting the corresponding PCSO[DREQ] of the 
port C special options register; see Section 34.4.1.4, “Port C Special Options Register 
(PCSO).” Enabling the DREQ signal effectively activates the corresponding IDMA 
channel. Requests for IDMA1 have priority over IDMA2. 


19.3.6.2 Suspending an IDMA Channel 

Disabling the corresponding DREQ signal by clearing the corresponding PCSO[DREQ] 
suspends the [DMA channel transfer. A transfer in progress will be completed before the 
bus is released. No further bus cycles are started while PCSO[DREQ] remains cleared. 
During channel suspension, the core can access IDMA internal registers to determine the 
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status of the channel or to alter parameters. If PCSO[DREQ] is set again while a transfer 
request is pending, the channel arbitrates for the bus and continues normal operation. 


19.3.7 IDMA Interface Signals—DREQ and SDACK 


Each IDMA channel (IDMA1 and IDMA2) has two dedicated control signals —DMA 
request (DREQ) and SDMA acknowledge (SDACK). DREQO and SDACK1 are dedicated 
to IDMA1, while DREQI1 and SDACK2 are for IDMA2. DREQ and SDACK are the 
handshake signals between the MPC850 and an external device requesting service. A 
peripheral requests IDMA service directly to the CPM by asserting DREQ. When the CPM 
begins the transfer, it acknowledges the device by asserting SDACK. A requesting device 
can either be the source or the destination of an IDMA transfer. 




















19.3.7.1 IDMA Requests for Memory/Memory Transfers 

Because there is no internal mechanism, an externally-connected DREQ must still be used 
to generate IDMA memory/memory transfer requests. This can be done using a 
general-purpose I/O line or a general-purpose timer output. 


To use a general-purpose I/O line, follow these steps: 


1. Externally connect a general-purpose output line to DREQ. 
2. Set RCCR[DRnM] (level-sensitive). 
3.. Drive the output low when the request generation should begin. 


The IDMA controller continuously requests the bus until the current buffer chain is 
completely transferred. The transfer terminates with an out-of-buffers error (IDSR[OB)). 


To use a general-purpose timer output (TOUT), follow these steps: 


1. Externally connect a TOUTx to DREQ. 
2. Clear RCCR[DRnM] (edge-sensitive). | 
3. Program the timer period to pace the IDMA requests (and thus bus utilization). 


An interrupt handler can service the IDSR[DONE] interrupt and suspend the channel; 
otherwise, the transfer terminates with an out-of-buffers error (IDSR[OB]). | 


19.3.7.2 IDMA Requests for Peripheral/Memory Transfers 


Once an IDMA channel has been activated, an external device requests a transfer using 
DREQ. The user programs the RISC controller (the CP) configuration register (RCCR) to 
make IDMA requests either edge- or level-sensitive. The RCCR settings also determine the 
priority of DREQ relative to the SCCs. See Section 18.5.1, “RISC Controller Configuration 
Register (RCCR).’ Since DREQO and DREQ1 are multiplexed through PC15 and PC14 
respectively, the port C pin assignment register and direction register must be configured as 
well; see Section 34.4, “Port C.” | 7 
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Level-sensitive mode maximizes IDMA channel bandwidth for devices requiring high 
transfer rates. For external devices that generate a pulsed transfer signal for each data 
operand, edge-sensitive requests should be used. 


19.3.7.2.1 Level-Sensitive Requests 

Setting RCCR[DRnM] makes the corresponding IDMA channel level-sensitive to requests. 
DREQ is sampled at rising edge of the clock. The device requests service by asserting 
DREQ and leaving it asserted as long as it needs service. 





Each time the IDMA controller issues a bus cycle either to read or write the device, it asserts 
SDACK to acknowledge the original transfer request on DREQ. The IDMA channel 
continues moving data in back-to-back DMA cycles until DREQ is negated. To ensure the 
correct number of DMA transfers are performed, the device must negate DREQ while the 
IDMA is acknowledging the last data move, that is, while SDACK is asserted. DREQ is 
sampled on the same rising edge on which TA is sampled to terminate the current cycle. 




















19.3.7.2.2 Edge-Sensitive Requests 


Clearing RCCR[DRnM] makes the corresponding IDMA channel edge-sensitive to 
requests. The edge sensitivity is further qualified to detect either any edge or falling edges 
only as programmed in PCINT[EDM15] and PCINT[EDM14] for DREQO and DREQI, 
respectively; see Section 34.4.1.5, “Port C Interrupt Control Register (PCINT).” 








In edge-sensitive mode, an IDMA channel moves one data operand per request. DREQ is 
sampled at each rising edge of the clock. When IDMA detects a request on DREQ, the 
request is considered pending and remains pending until it is processed. Subsequent 
requests on DREQ are ignored until the pending request is acknowledged. 








19.3.8 IDMA Transfers—Dual-Address and Single-Address 


Once an IDMA channel successfully arbitrates for the bus, it begins the transfer. An IDMA 
channel has the same bus cycle timing as the other internal masters. 


The IDMA controller supports both dual- and single-address transfers. The dual-address 
transfer consists of a source read and a destination write—a memory/memory or 
memory/peripheral transfer. A single-address transfer, also called fly-by, consists of one 
external read or write bus cycle—a memory/peripheral transfer. 


19.3.8.1 Dual-Address (Dual-Cycle) Transfer 


The IDMA channels can operate in a dual-address transfer mode in which data is first read 
using the source pointer and placed in internal storage. The data operand is then packed 
onto the bus and written to the address given by the destination pointer. The read and write 
transfers can take several bus cycles each because of differences in the source and 
destination operand sizes. 
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The dual-address read and write cycles are described as follows: 


e Dual-address source read—SAPR drives the address bus, SFCR drives the address 
type, and DCMR drives the size control. Data is read from the memory or peripheral 
and placed in internal storage at the end of the bus cycle. For memory reads, SAPR 
is automatically incremented by 1, 2,4, or 16, depending on the address and size 
information specified by DCMR. See Section 19.3 .2,“IDMA Parameter RAM,” and 
Section 19.3.3.1, “DMA Channel Mode Registers (DCMR).” 


¢ Dual-address destination write—The data in internal storage is written to the 
peripheral or memory governed by the address in DAPR, the address type in DFCR, 
and the size in DCMR. For memory writes, DAPR is automatically incremented by 
1,2,4, or 16 according to DCMR. The byte count is decremented by the number of 
bytes transferred. When the byte count reaches zero and the transfer reports no 
errors, IDSR[DONE] is flagged, which triggers a maskable interrupt. See 
Section 19.3.2, “IDMA Parameter RAM,’ and Section 19.3.3, “IDMA Registers.” 


Additionally, for peripheral/memory dual-address transfers, the SDACK signal asserts 
during the peripheral access. For dual-address transfers, microcode performs byte-packing 
using a 16-byte buffer in the dual-port RAM. Regardless of the source size, destination size, 
source starting address, or destination starting address, IDMA uses the most efficient 
packing algorithm possible to perform the transfer in the least number of bus cycles. 


19.3.8.2 Single-Address (Single-Cycle) Transfer (Fly-By) 


Each IDMA channel can be independently programmed to provide single-address, or 
fly-by, transfers. The IDMA channel bypasses or “flys-by” internal storage since the 
transfer occurs directly between a device and memory. DCMR[S/D] controls the direction 
of the transfer. If DCMR[S/D] = 0b01, the IDMA controller handshakes with the peripheral 
for the source data and writes to the destination memory address provided. If 
DCMR[S/D] = 0b10, the IDMA controller handshakes with the destination peripheral and 
reads from the source memory address provided. The single-address ae and write cycles 
are described below. : 


© Single-address memory-read/peripheral-write— The memory address in SAPR, the 
address type in SFCR, and the size in DCMR provide the data and control signals to 
the data bus. This bus cycle operates like a normal read bus cycle. The SAPR is 
incremented by 1, 2, or 4, according to the programming of DCMR[SIZE]. The 
destination device is controlled by the IDMA handshake signals DREQ and 
SDACK. Asserting SDACK provides write control to the destination device. 
Figure 19-10 and Figure 19-11 show the transaction timing diagrams for 
asynchronous and synchronous single-address peripheral writes. See Section 19.3.7, 
“IDMA Interface Signals —DREQ and SDACK,,’ for more on IDMA handshake 
signals. 
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Figure 19-10. SDACK Timing Diagram: Single-Address 
Peripheral Write, Externally-Generated TA 
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Figure 19-11. SDACK Timing Diagram: Single-Address 
Peripheral Write, Internaliy-Generated TA 
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e Single-address memory-write/peripheral-read—The source device is controlled by 
the IDMA handshake signals (DREQ and SDACK). When the source device 
requests. service from the IDMA channel, IDMA asserts SDACK to allow the source 
device to drive data onto the data bus. The data is written to the memory address in 
DAPR, the address type in DFCR, and the size in DCMR. The data bus is 
three-stated for this write cycle. The DAPR is incremented by 1, 2, or 4, according 
to the programming of DCMR[SIZE]. See Section 19.3.7, “IDMA Interface 
Signals —-DREQ and SDACK,” for more on IDMA handshake signals. 
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Figure 19-12. SDACK Timing Diagram: Single-Address 
Peripheral Read, Internally-Generated TA 


19.3.9 Single-Buffer Mode on IDMA1—A Special Case 


For single-buffer transfers from a peripheral to memory of up to 64 bytes per request, 
IDMA1 offers a reduced-latency solution using single-address bursts. The memory 
destination address, the buffer length (byte count), and the channel mode register are stored 
directly in the IDMA parameter RAM instead of in a formal BD. Table 19-9 shows the 
single-buffer mode IDMA1 parameter RAM map. 
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after each burst. BCR must be a multiple of 16. The IDMA channel will terminate the 
block transfer wnen BCR reaches zero. 


DMA channel mode register. 
[= fees CS 


Note: Parameters should not be modified while DMA is active. 


1 From IDMA1 base = IMMR + 0x3CCO 





Single-buffer mode is selected by setting RCCR[EIE], the CPM external interrupt enable 
bit; see Section 18.5.1, “RISC Controller Configuration Register (RCCR).” Note that the 
CPM external interrupt always refers to a special request to the CPM, not to the core. 


19.3.9.1 IDMA1 Channel Mode Register (DCMR) (Single-Buffer Mode) 
DCMR contains the channel’s function code and byte-order convention, previously held in 
function code registers. DCMR also holds the channel start bit (enable) and burst transfer 
information. Figure 19-13 shows the DCMR format. 









paj =f eo | ae fom 


0000_0000_0000_0000 


IDMA1 Base + 0x08 


0000_0000_0000_0000 


IDMA1 Base + Ox0A 


Figure 19-13. IDMA Channel Mode Register (DCMR) (Single-Buffer Mode) 







Table 19-10 describes the DCMR bit settings for IDMA1 in single-buffer mode. 
Table 19-10. DCMR Field Descriptions (Single-Buffer Mode) 
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Table 19-10. DCMR Field Descriptions (Single-Buffer Mode) 


Ns 
AT[1-3] | See corresponding description in Table 19-8 above. | 


Start. Enables the IDMA channel. Cleared automatically upon completion of the transfer request. 
0 Disable IDMA channel. | 
1 Enable IDMA channel. Set STR after programming BAPR and BCR. 












Bursts per request. Determines how many bursts will be initiated for each request. 
00 One burst per request (16 bytes). 

01 Two bursts per request (32 bytes). 

10 Reserved 

11 Four bursts per request (64 bytes). 


6-31 |— | Reserved. Should be cleared. 


19.3.9.2 IDMA1 Status Register (IDSR1) (Single-Buffer Mode) 

IDSR1 in single-buffer mode behaves the same way as defined in Section 19.3.3.2, “IDMA 
Status Registers (IDSR1 and IDSR2).” The only relevant event bit, however, is DONE, 
which is set when the byte count in BCR reaches zero. Figure 19-14 shows the register 
format. 








| 0000_0000_0000_0000 


R/W 


; IMMR + 0x910 
Figure 19-14. IDMA1 Status Register (IDSR1) (Single-Buffer Mode) 


19.3.9.3 IDMA1 Mask Register (IDMR1) (Single-Buffer Mode) 
IDMR1 in single-buffer mode behaves the same way as defined above; see 
Section 19.3.3.3, “IDMA Mask Registers (IDMRI1 and IDMR2).’ Figure 19-14 above 
shows the mask register’s format in single-buffer mode. IDMR1’s internal address IMMR 
offset) is 0x914. | 


19.3.9.4 Burst Timing (Single-Buffer Mode) 

A typical single-address burst timing when IDMA1 is in single-buffer mode, is illustrated 
in Figure 19-15. The peripheral asserts DREQO and waits for SDACK1 to initiate a burst 
transfer to memory. The peripheral must negate DREQO before the last beat of the transfer; 
otherwise, IDMA assumes that another DMA request is pending —DCMR[STR] will not 
be cleared—and immediately initiates another transfer. If no buffer is available when this 
extra transfer begins, erratic operation occurs. 
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Figure 19-15. Single-Address IDMA1 Burst Timing (Single-Buffer Mode) 


a 


19.3.10 External Recognition of an IDMA Transfer 
The following are ways to externally determine if IDMA is executing a bus cycle: 


e Monitor the AT signals of the SDMA channels for the user-defined function code. 
(ATO is always high for a DMA access.) 


¢ Monitor SDACK, which shows accesses to the peripheral. SDACK activates on 
either the source or destination bus cycles, depending on DCMR[S/D]. Note that if 
Ethernet is running, this method does not work since SCCs in Ethernet mode also 
toggle SDACK for SDMA transfers. 
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19.3.11 Interrupts During an IDMA Bus Transfer 


The MPC850 supports a synchronous bus structure with provisions allowing a bus master 
to detect and respond to errors during a bus cycle. An IDMA channel recognizes the same 


bus interrupt sources that the core recognizes—reset and transfer error acknowledge 
(TEA). | 


e Reset—On an external reset, an IDMA immediately aborts channel operation, 
returns to the idle state, and clears the IDSR. If a bus cycle is in progress, the cycle 
is terminated, the control and address/data pins are three-stated, and the bus 
ownership is released. Program control passes to the handler at the system reset 
interrupt vector (0x00100). 


¢ Transfer error acknowledge (TEA)— When a fatal error occurs during an IDMA bus 
cycle, TEA is used to abort the cycle and systematically terminate the channel’s 
operation. The IDMA terminates the current bus cycle, flags an error in SDSR and 
interrupts the core if not masked by SDMR. The IDMA waits for the CPM to reset 
before starting any new bus cycles. Note that data read from the source into internal 
storage is lost. Program control passes to the handler at the machine check interrupt 
vector (0x00200). 





The machine check and system reset interrupts are described in Chapter 6, “Exceptions.” 


Note that the source or destination device under IDMA handshake control for 
single-address transfers may need to monitor TEA to detect a bus exception for the current 
bus cycle. TEA terminates the cycle immediately and negates SDACK, which is used to 
control the transfer to or from the device. 
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The physical interface to all SCCs and SMCs is implemented in the serial interface (SI). 
The SI allows each individual SCC and SMC to be connected externally either through a 
time-division multiplexed (TDM) interface or through dedicated pins in a non-multiplexed 
serial interface (NMSI). 


When an SCC or SMC is configured to use the NMSI, the SI provides flexible clocking 
from a bank of clocks, including external clock pins and internal baud rate generators 
(BRGs). See Section 20.3, “NMSI Configuration?’ and Section 20.4, “Baud Rate 
Generators (BRGs).” 





Connecting the SCCs and SMCs to the multiplexed (TDMa) interface is accomplished 
through a set of TDMa pins and a time-slot assigner (TSA). The user programs the TSA to 
route data from the TDM data stream to and from the SCCs and SMCs. The TSA also 
provides external strobe signals (LIST1-—8), which can be used to enable external devices, 
such as codecs, to insert or take data from the TDM data stream. An external framer 
(providing receive and transmit data, clocks, and synchronization signals) is required to 
interface to the TDM channel. Common examples of TDM channels are T1 lines in the U.S. 
and Japan and CEPT (£1) lines in Europe. 


If the TSA is not required for routing data to and from the SCCs and SMCs, it can still be 
used to generate complex waveforms on its eight strobe output pins (LIST[1—8]). For 
example, the user can program the TSA to implement stepper motor control signals of 
variable duty cycle and period. 
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Figure 20-1 shows the SI block diagram. 
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Figure 20-1. MPC850 SI Block Diagram 
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20.1 Si Features 


The TSA’s main features are as follows: 


Ability to connect the TDM channel as follows: 

— Tl or CEPT line 

— Pulse code modulation highway (PCM) 

— Integrated services digital network (ISDN) primary rate 

— ISDN basic rate—using an interchip digital link (IDL) 

— ISDN basic rate—using a general circuit interface (GCI) 

— User-defined interfaces 

Independent Tx and Rx routing paths programmed in the SI RAM 
Independent Tx and Rx frame syncs 

Independent Tx and Rx clocks 

Selection of rising/falling clock edges for the frame sync and data bits 
Supports |x and 2x input clocks (1 or 2 clocks per data bit) 
Selectable delay (0-3 bits) between frame sync and frame start 


Eight programmable strobe outputs (LIST[1-4] used for RXRAM while LIST[5-8] 
is used for TXRAM) 


Bit or byte resolution in routing, masking, and strobe selection 
Supports frames up to 8,192 bits long 

Internal routing and strobe selection can be programmed dynamically. 
Supports automatic echo and loopback modes for the TDM channel 


The NMSI is discussed in Section 20.3, “NMSI Configuration.” Its main features are as 
follows: 


Each SCC and SMC can be programmed independently to work with its own set of 
non-multiplexed signals 


Each SCC can have its own set of modem control signals 
Each SMC can have its own set of four signals 


Each SCC and SMC can derive clocks externally from a bank of eight clock signals 
or a bank of four baud-rate generators 


20.2 The Time-Slot Assigner (TSA) 


The time-slot assigner (TSA) implements both internal route selection and time-division 
multiplexing (TDM) for multiplexed serial channels. The TSA supports the serial bus rate 
and format for most standard TDM buses, including the T1 and CEPT highways, pulse code 
modulation (PCM) highway, and ISDN buses in both basic and primary rates. The two 
popular ISDN basic rate buses interchip digital link (IDL) and general circuit interface 
(GCI, also known as IOM-2) are supported. 
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TSA programming is independent of the protocol used by the SCC or SMC. The SCCs and 
SMCs can be programmed for any synchronous protocol without affecting TSA 
programming. The TSA simply routes programmed portions of the received data frame 
from the TDM pins to the target SCCs and SMCs, while the target SCC or SMC handles 
the received data in the actual protocol. 


In its simplest mode, the TSA identifies both Rx and Tx frames using one sync pulse and a 
single clock signal provided by the user externally. This mode can be enhanced to allow 
independent routing of Tx and Rx data on the TDM channel. The user defines the length of 
a time slot, which need not be limited to 8 bits or even to a single contiguous position within 
the frame. For more flexibility, the user can also provide separate Rx and Tx syncs as well 
as independent clocks. Figure 20-2 shows example TSA configurations ranging from the 


simplest to the most complex. 
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MPC850 Simplest TDM Example 
1 TDM Sync | | 
1 TDM Clk 
TSA »TDM SCC2 SMC1 
tomtx | | {sors} Stn | 
romex [| [soi3]——~—~—S~dC Soin) 
SCC2 SMC1 
MPC850 More Complex TDM Example — Unique Routing 
1 TDM Sync | | 
1 TDM Clk 
TSA TDM SCC2 SMC1 
romtx [Sott[si2] | ~+<(| +i. +d 
tome [| [So3——S=«d Son?” 
SCC2 SMC1 
MPC850 Even More Complex TDM Example — Multiple Time-Slots per Channel with Varying Sizes of Time-Slots 
1 TDM Sync | | 
1 TDM Clk 
TSA TDM scC2 SMC1 SCC2 


scc2 SMCi SCC2 


NOTE: The two shaded areas of SCC2 Rx are received as one high-speed data stream by the SCC2 
and stored together in the same data buffers. 


MPC850 Most Complex TDM Example - Totally Independent Rx and Tx 
TDM Tx Sync sae 
TDM Tx Cik 
TSA TDM SCC2 SMC1 SCC2 
TDM Rx Sync oe ne ee 
TDM Rx Clik | | 
TDM Rx I 


sCC2 SMC1 


Figure 20-2. Various Configurations of a TDM Channel 
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The TSA can support two, independent, half-duplex TDM sources, one receiving and one 
transmitting, using two sync inputs and two input clocks. In addition to channel 
programming, the TSA supports up to eight strobe outputs that may be asserted on a bit 
basis or a byte basis. These strobes are completely independent from the channel routing 
used by the SCCs and SMCs. They are useful for interfacing to other devices that do not 
support the multiplexed interface or for enabling/disabling three-state I/O buffers in a 
multi-transmitter architecture. (Note that open-drain programming on the TXDx pins to 
support a multi-transmitter architecture is programmed in the parallel I/O block.) These 
strobes can also generate output waveforms for such applications as stepper motor control. 


The TSA routing is programmed in a 512-byte, core-accessible SI RAM located in the 
internal register section of the MPC850 separate from the dual-port RAM. The SI RAM 
contains a total of 128 32-bit entries: the first 64 entries are for programming receive 
routing, and the second 64 are for transmit routing. The entries define the number of bits or 
bytes to be routed to and from the SCCs or SMCs and also control external strobes. 


The amount of SI RAM available for time-slot programming depends on the configuration 
of the SIGMR; see Section 20.2.4.1, “SI Global Mode Register (SIGMR).” Using all 64 
entries of the Rx or Tx SERAM,TDMa can support a maximum frame length of 8,192 bits. 
Enabling on-the-fly changes divides the SI RAM to allow for routing workspace. See 
Section 20.2.3, “SI RAM.” | | 


The SI supports two testing modes—echo and loopback. The echo mode provides a return 
signal from the physical interface by retransmitting the signal it receives. The physical 
interface echo mode differs from the individual SCC echo mode in that it operates on the 
entire TDM signal rather than on an individual SCC channel. Loopback mode causes the 
physical interface to receive the same signal it is sending. Checking both the entire SI and 
the internal channel routes, the SI loopback mode does more than the individual SCC 
loopback. Programming echo and loopback modes are programmed in SIMODE[SDMa]; 
see Section 20.2.4.2, “SI Mode Register (SIMODE).” Loopback mode can also be 
programmed on a time-slot basis in an individual SI RAM entry; see Section 20.2.3.5, 
“Programming the SI RAM.” Note that loopback operation requires that the receive and 
transmit sections of the TDM use common clock and synchronization signals. 


The maximum external serial clock that may be an input to the TSA is SYNCCLK/2.5. If 
an SCC or SMC is operating with the NMSI, the serial clock rate may be slightly faster at 
a value not to exceed SYNCCLK/2. | 


Note that a sync pulse received during TSA frame routing is ignored. However, when 
programmed for a one-clock delay between the sync and start-of-frame pulses, the TSA can 
accept the last bit of a frame overlapping the sync pulse of the next frame. 
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20.2.1 TSA Signals 
The TSA signals for TDMa are shown in Table 20-1. 
Table 20-1. TSA Signals 


LIRSYNCa/L1TSYNCa Receive/transmit synchronization signals. Input to the MPC850. 


LiRCLKa/L1TCLKa Receive/transmit clocks. Input to the MPC850. | 


Receive data. Input to the MPC850. 


Transmit data. Open-drain output of the MPC850. 


LiRQa/L1GRa IDL request (output) and grant (input) signals. Used if D-channel arbitration is required. 


Note that if the receive and transmit clocks and the synchronization signals are common, 
LITSYNCa and L1TCLKa are not needed. 





EG 
4|/n 
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20.2.2 Enabling Connections to the TSA 


Each SCC and SMC can be independently enabled to connect to the TSA. The SCCs are 
connected to the TSA by programming the SI clock route register SICR[SCx]; see 
Section 20.2.4.3, “SI Clock Route Register (SICR).” The SMCs are connected to the TSA 
by setting the mode register SIMODE[SMCx]; see Section 20.2.4.2, “SI Mode Register 
(SIMODE).” The general mode register SIGMR[ENa] must also be set to enable TDMa; 
see Section 20.2.4.1, “SI Global Mode Register (SIGMR).” Once the connections are made, 
the exact routing is determined in the SI RAM. See Figure 20-3. 


SIGMRIENa]=1 to enable TDMa 


























SMC1 4 > SMC1 Pins 





SIMODE[SMC2]=1 





SIMODE[SMC2]=0 





Time-Slot Multiplexed 
Assigner > TDMa/SMC2 | 1 7 si 
Control Logic Pins nleneee 
SICRISC2]=1 
SICR[SC2]=0 Ol 
> SCC2 Pins 
SICRISC3}=1 
SICRISC3]=0 | 
SCC3 A - > SCC3 Pins 
Non-Multiplexed Interface 
SIMODE[SMC 1) | (clocking paths not shown 
SIMODE[SMC1]=0 eoenghe wa 


SMC2 





Figure 20-3. Enabling Connections through the Sl 
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20.2.3 SIRAM 


The 512-byte SI RAM contains the SCC and SMC routing information for the TDM 
channel. The SI RAM totals 128 32-bit entries —64 entries each for receive and transmit 
routing. Representing one time slot, an entry controls from 1 to 16 bits/bytes and up to eight 
(four each for Rx and Tx) strobe pins (all active high). 


The TDM channel options with their corresponding SI RAM partitioning follow: 


¢ A single TDM channel with static routing —SI RAM is divided into Rx and Tx parts. 
¢ A single TDM channel with dynamic routing —Rx and Tx RAMs are halved. 


Note that the SI RAM is uninitialized after power-on—the core should program them | 
before enabling the TDM channel. 


20.2.3.1 Disabling and Reenabling the TSA 


_ The following steps must be taken any time the TSA is disabled. These steps also apply to 
changing the SI routing when the TSA is configured for static frames. 


1. SCC and SMC connections to the TSA must be disabled. 
2. The SI configuration can be modified. 
3. SCC and SMC connections to the TSA must be reenabled. 


— 20.2. 3. 2 TDMa Channel with Static Frames 


In an SI configuration using one multiplexed channel with static fame shown in 
Figure 20-4, there are 64 entries in the SI RAM for Rx data/strobe routing and 64 entries 
for Tx data/strobe routing. 


RDM = 00 
One Channel (TDMa) with Independent Rx and Tx Route 


Framing Signals 
L1RCLKa 
LIRSYNCa 






SI RAM Address: 0 
(32-Bit Entries) 





64 Entries 
Rxa 
Route 







255 


256 L1TCLKa 


64 Entries L1TSYNCa 


Txa 
Route 






511 


Figure 20-4. Si RAM Partitioning Using TDMa with Static Frames 


20.2.3.3 SI RAM Dynamic Changes 


The routing of a TDM channel can be changed while the SCCs and SMCs remain 
connected to the TSA. Enabling dynamic changes divides the SI RAM into current-route 
and work-space shadow areas. 
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Once the current-route RAM is programmed, the TDM channel can be enabled and SI 
operation begun. New routing information can then be programmed into the shadow RAM. 
Setting the channel’s change-shadow-RAM bits, SICMR[CSRRa, CSRTa], in the SI 
command register tells the SI to activate the shadow RAM (deactivating the current-route 
RAM) when the next frame sync arrives. The SI signals the user by clearing 
SICMR[CSRRa, CSRTa] when the swap takes effect. These steps can be repeated with the 
former current-route RAM always becoming the new shadow RAM and vice versa. 


When using one channel (TDMa) with dynamic changes, as in Figure 20-5, the initial 
current-route RAM byte addresses are as follows. 

e (0-127 RXa route 

e 256-383 TXa route 
The shadow RAMs are at addresses: 


e {28-255 RXa route 
e 384-511 TXa route 





MOTOROLA | Chapter 20. Serial Interface 20-9 


Part V. The Communications Processor Module 


Initial State RAM address: 
The TSA uses the first part of 

the RAM, and the shadow is 

the second part of the RAM. 


CSRxa = 0 

Framing Signals: 
CSRRa=0 RAM Address: 
CSRTa=0 


Framing Signals: 
Programming 


Program the shadow 
RAM for the new 
Rx and Tx route and set 


CSRxa. 
Framing Signals: 
CSRRa=1 RAM Address: 
CSRTa=1 
Framing Signals: 
Exchange RAM Address: 


The SI exchanges between 
the shadow and the 
current-route RAMs 

and resets CSRxa. 


Framing Signals: 


CSRRa=0 
CSRTa=0 


Framing Signals: 


RAM Address: 


RAM Address: 


255 


127 128 





A RCLKa 
LIRSYNCa 


383 384s 





; L1TCLKa 


LITSYNCa 


127 128 255 





7 L1RCLKa 


LIRSYNCa 
383 384 511 





Mi TCLKa 
LITSYNCa 


0 127 128 255 





M LiRCLKa 


LIRSYNCa 


256 383 384 511 





m L1TCLKa 
L1TSYNCa 


Figure 20-5. Si RAM Dynamic Changes with TDMa 


The entire SI RAM is always readable, but only the shadow RAM is safe to write. The SI 
status register (SISTR) can be read to determine which part of the RAM is the current-route 
RAM. The SI RAM pointer (SIRP) register can be used to determine which SI RAM entry 
is active. In addition, by externally connecting a strobe to an interrupt signal, an individual 
SI RAM entry can generate an interrupt. 


20.2.3.4 TDMa Channel with Dynamic Frames 
In an SI configuration using the one TDM channel with dynamic frames, TDMa has 32 
entries apiece for Tx and Rx data/strobe routing, as shown in Figure 20-6. One RAM 
partition is the current-route RAM; the other is shadow RAM that can be safely 
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reprogrammed. After programming the shadow RAM, set the CSRa bit of the associated 
channel in the SI command register (SICMR). When the next frame sync arrives, the SI 
swaps the current-route RAM with the shadow RAM. 


RDM = 01 
TDMa with Shadow RAM for Dynamic Route Changes 











S| RAM Address: 0 Framing Signals 





(32-Bit Entries) 32 Entries LiIRCLKa 
RXa LIRSYNCa 
Route 
127 
256 
32 Entries LITCLKa 
TXa LITSYNCa 
Route 
383 


Figure 20-6. Si RAM Partitioning Using TDMa with Dynamic Frames 


20.2.3.5 Programming the SI RAM 


Each SI RAM entry determines the routing of the serial bits and the state of strobe outputs 
for one time slot. Figure 20-7 shows the format of an SI RAM entry. 


LOOP | SWTR|SSEL4| SSEL3|SSEL2| SSEL1 | — | CSEL 





Figure 20-7. SIRAM Entry 
Table 20-2 describes SI RAM entry fields. 
Table 20-2. SIRAM Field Descriptions 


0 Normal mode (no loopback). 
1 Loopback for this time slot. 


Switch transmit and receive. Valid only in Rx route RAM; ignored in the Tx route RAM. Affects 


operation of both L1RXDa and L1TXDa. See Figure 20-8 and the accompanying text. 

0 Normal operation of L1TXDa and L1RXDa. 

1 Data is sent on L1RXDa and received from L1TXDa for the duration of this entry. Note that erratic 
results may occur if the Tx and Rx sections of the TDM do not use a common clock source. 
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Table 20-2. SIRAM Field Descriptions (Continued) 


[ee [ieef 


2-5 SSELn | Strobe select 1-4. The strobes L1ST[1—4] can be assigned to the Rx SI RAM and asserted or | 
negated with L1RCLKa. For the Tx SI RAM, SSELn correspond to L1ST[5—7] and are asserted or 
negated with L1TCLKa. Using active-high logic, each SSELn will be the value of the corresponding 
strobe during this time slot. Multiple strobes can be asserted simultaneously. A strobe can be 


configured to remain asserted for multiple, consecutive SI RAM entries; however, if a strobe is 
asserted on the last entry in the table, the strobe is negated after the last entry finishes processing. 
Note: The corresponding parallel 1/O pins (either port B or C) must be configured for strobe 
operation; see Chapter 34, “Parallel I/O Ports.” 


le [= Reserved, should be cleared. 


7-9 CSEL {Channel select. Indicates which channel the time slot is routed to. 
000 This time slot is not used. Tx data signal is three-stated; Rx data signal is ignored. 
001 Reserved. Do not use. 
010 SCC2 
011 SCC3 


100 Reserved. Do not use. 

101 SMC1 

110 SMC2 

111 This time slot is not used. Also used in SCIT mode to indicate the D channel grant bit. 


Count. The number of bits/bytes (the unit is determined by BYT) that the routing and strobe select of 
this entry controls. If CNT = Ob0000, 1 bit/byte is routed; if CNT = 0b1111, 16 bits/bytes are routed. 


14 BYT Byte resolution. 
0 Bit resolution. CNT maeieates the number of bits in this entry. 
1 Byte resolution. CNT indicates the number of bytes in this ay 
LST 


Last entry ina TDM channel’s Rx or Tx SI RAM. LST must be set in the last entry even if all the 
entries are used. 

0 Not the last entry in this TDM channel’s Rx or Tx SI RAM. 

1 Last entry. After this entry, the SI waits for SYNC to start the next frame. 


16-31 | Reserved 





For applications needing to receive data from a Tx signal and send data on an Rx signal, set 


SIRAMn[SWTR]. For example, stations A and B in Figure 20-8 use different time slots on 
one TDM channel. Even though they share Rx and Tx data lines, stations A and B can 
communicate using the SWTR option. 


L1RXD L1RXD 
LITXD LITXD 



























Rx TX 





Rx TX Rx TX TX Rx 
Station A Station B Station A Station B 
Tx and Rx SI] RAMn[SWTR] = 0 Tx and Rx SI RAMn[SWTR] = 1 


Figure 20-8. Example Using Si RAMn[SWTR] 
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The SWTR option allows station B to listen to transmissions from and send data to station 
A. By setting SWTR in its Rx route RAM entry, station B receives data from L1TXD and, 
if the time slot’s Tx route RAM entry allows, sends data on LIRXD. To prevent sending on 
L1IRXD while listening to station A, clear the CSEL bits in the corresponding Tx route 
RAM entries. Conversely, to prevent receiving on L1TXD while sending on LIRXD, clear 
the CSEL bits in corresponding Rx SI RAM entries. Note that using the SWTR option may 
cause data collisions with other stations unless an empty (quiet) time slot is used. 


20.2.3.6 SI RAM Programming Example 


This section shows how to program the SI RAM to support the 10-bit IDL bus whose format 
is shown in Figure 20-24. Here, the TSA supports the B1 channel with SCC2, the D channel 
with SCC3, the first 4 bits of the B2 channel with an external device (using a strobe to 
enable the external device), and the last 4 bits of B2 with SMC1. Additionally, the TSA 
marks the D channel with another strobe signal. 


Partition the frame from the beginning (the sync) to the end according to the support 
needed: 

e 8 bits (B1)—SCC2 

e 1 bit (D)—SCC3 + strobel 

¢ | bit—No support 

e 4 bits (B2)—strobe2 

e 4 bits (B2)—SMC1 

e | bit (D)—SCC3 + strobel 
Each partition represents one SI RAM entry. Table 20-3 shows the SI RAM entries. 


Table 20-3. Example SI RAM Entry Settings for an IDL Bus 


ne A... SER 
Number | swtr | sseL | CSEL ad all 
0000 0000 






Because the IDL requires the same routing for both receiving and sending, the above entries 
should be written to both the Rx and Tx route RAM. Set SIMODE/[CRTx] (common 
receive/transmit) to instruct the TSA to use the same clock and sync for both sets of SI 
RAM entries. 
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For examples showing register programming, see Section 20.2.5.2, “Programming the IDL 
Interface,’ and Section 20.2.6.3, “GCI Interface (SCIT Mode) Programming Example.” 


20.2.4 The Si Registers 


The following sections describe the SI registers. 


20.2.4.1 Si Global Mode Register (SIGMR) 


The SI global mode register (SIGMR), shown in Figure 20-9, defines the SI RAM division 
modes and enables the TDM channel. 





Figure 20-9. SI Global Mode Register (SIGMR) 


Table 20-4 describes the SIGMR fields. 







Table 20-4. SIGMR Field Descriptions 
Description 
Enable — 


0 TDMa is disabled. SI RAM and TDM routing are in a state of reset; all other SI functions still operate. 
1 TDMa is enabled. 








RAM division mode. Defines the SI RAM partitioning based on whether dynamic changes are needed. 

00 Static TDMa with 64 entries apiece for Rx and Tx routing. 

01 Dynamic TDMa with 32 entries apiece for current-route and shadow Rx routing and 32 apiece for 
current-route and shadow Tx routing. 

1x Reserved. 








Note that after setting SIGMR[ENa], data from the transmit buffers does not immediately 
appear at the TDM transmit pin with the first frame because the SCCs require start-up 
clocking at initialization. Expect a number of bytes of idle (typically 10-15) depending on 
the size of the frame and number of time slots routed to the particular SCC. 
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20.2.4.2 Si Mode Register (SIMODE) 


The SI mode register (SIMODE), shown in Figure 20-11, defines the SI operation modes 
for the TDM channel and SMCs. 


R/W 


R/W 





Figure 20-11. Si Mode Register (SIMODE) 
Table 20-5 describes the SIMODE fields. 


Table 20-5. SIMODE Field Descriptions 


fae ome fe 


0,16 SMCx SMCx connection 
0 NMSI mode. The clock source is determined by SMCxCS and the data comes from a dedicated 
pin (SMTXD1 and SMRXD1 for SMC1 or SMTXD2 and SMRXD2 for SMC2) in NMSI mode. 
1 SMCx is connected to the multiplexed SI (TDM channel). 


1-3, SMCxCS | SMCx clock source (NMSI mode). SMCx can take its Tx and Rx clocks from a baud rate generator 
17-19 or one of four pins from the bank of clocks. However, Tx and Rx clocks must be common when 
connected to the NMSI. 
| 000 BRG1 
| 001 BRG2 
010 BRG3 
011 BRG4 
100 CLK1 
101 CLK2 
110 CLK3 
111 CLK4 


415 [— Reserved, should be cleared. 


SI diagnostic mode for TDMa. In modes 01,10, and 11, Rx and Tx clocks should be common. 

00 Normal operation. 

01 Automatic echo. The TDM transmitter automatically resends its Rx data bit-by-bit. The Rx 
section operates normally, but the Tx section can only resend Rx data. L1GRa is ignored. 

10 Internal loopback. TDM transmitter output is connected internally to the TDM receiver input— 
L1TXDa is connected to Li1RXDa. The receiver and transmitter operate normally, but data on 
L1RXDa is ignored. Data appears on L1TXDa, L1RQa is asserted normally, and L1GRa is 
ignored. 

11 Loopback control. TDM transmitter output is connected internally to the TDM receiver input— 
L1TXDa is connected to L1RXDa. Transmitter output L1TXDa and L1RQa are inactive. 
Provides loopback testing of the entire TDM without affecting the external serial lines. 
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22-23 


as 


N 
© 


NO Le) 
NO 


29 


30-31 


20-16 


RFSDa 


DSCa 


CRTa 


STZa 


CEa 


FEa 


GMa 


TFSDa 


Table 20-5. SIMODE Field Descriptions (Continued) 


Receive frame sync delay for TDMa. Indicates the delay between the Rx sync and the first bit of 
the Rx frame. Even if CRTa is set, RFSDa does not control the Tx frame delay. 
00 No bit delay. The first bit of the frame is received on the same clock as sync. Use for GCI. 


01 1-bit delay. Use for IDL. 

10 2-bit delay. 

11 3-bit delay. © 

See the examples in Figure 20-12 and Figure 20-13. 






Double speed clock for TDMa—for TDM interfaces, such as GCI, that define the input clock to be 

twice as fast as the data rate. 

0 Channel clock (L1RCLKa and/or L1TCLKa) is equal to the data clock. Use for IDL and most 
other TDM formats. 

1 Channel clock rate is twice the data rate. Use for GCI. 


Common receive and transmit pins for TDMa. 

0 Separate pins. The receive section of the TDM uses L1RCLKa and L1RSYNCa for framing; the 
transmit section uses L1TCLKa and L1TSYNCa for framing. 
Common pins. Both the transmit and receive section use L1RCLKa as the clock pin of the 
channel and L1RSYNCa as the sync pin. Use for IDL and GCI. Useful when the transmit and 
receive section of a given TDM share clock and sync signals. L1TCLKa and L1TSYNCa can be 
used for general-purpose I/O. 


Set L1TXDa to zero for TDMa. 

0 Normal operation. 

1 L1TXDa is cleared until serial clocks are available —useful for GCI activation; see 
Section 20.2.6.1, “GCI Activation/Deactivation.” 


Clock edge for TDMa. 

When DSCa = 0: 

0 Data is sent on the rising clock edge and received on the falling edge (use for IDL and GCI). 
1 Data is sent on the falling edge of the clock and received on the rising edge. 

When DSCa = 1: 

0 Data is sent on the rising clock edge and received on the rising edge. 

1 Data is sent on the falling edge of the clock and received on the falling edge. 


Frame sync edge for TDMa. Indicates when L1RSYNCa and L1TSYNCa pulses are sampled with 
the falling/rising edge of the channel clock. 

0 Falling edge. Use for IDL and GCI. 

1 Rising edge. 


Grant mode for TDMa. 

0 GCI/SCIT mode. The GCI/SCIT D channel grant mechanism for transmission is supported 
internally. The grant is signalled by one bit of the Rx frame and is marked by setting 
SIRAM[CSEL] to 111 to assert an internal strobe. See Section 20.2.6.2.2, “SCIT Mode.” 

IDL mode. A grant mechanism is supported if the corresponding SICR[GRn] are set. The grant 
is a sample of the L1GRa signal while L1TSYNCa is asserted. This grant mechanism implies 
the IDL access controls transmission on the D channel. See Section 20.2.5.2, “Programming 
the IDL Interface.” 


Transmit frame sync delay for TDMa. Determines the delay between the Tx sync and the first bit of 
the Tx frame. If CRTa is set, the Rx sync is used as the common sync, and the TFSDa bits refer to 
this common sync. 

00 No bit delay. The first bit of the frame is sent on the same clock as the sync. 

01 1-bit delay. 
10 2-bit delay. 
11 3-bit delay. 
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The following series of figures show timing examples. Figure 20-12 and Figure 20-13 show 
the effects of changing the delay from frame sync to data valid. 


End of Frame 


LICLK 
rat ie Oe Ge ea 









LISYNC 
(FE=1) : , 


One Clock Delay from Sync Latch to First Bit of Frame 


Figure 20-12. One Clock Delay from Sync to Data (xFSD = 01) 


eal Lal Lt a Le ea 
(CE=0) | . 


LISYNC 
(FE=1) 


Data 





No Delay from Sync Latch to First Bit of Frame 


Figure 20-13. No Delay from Sync to Data (xFSD = 00) 


Figure 20-14 and Figure 20-15 show example timings while changing SIMODE[DSC] and 
SIMODE[CE]. 


CE=1 xFSD=1 

LICLK | | | | | | | | | | | | | | 
{ 
| 

L1SYNC 7 | (FE=0) 
{ 

LISYNC 

L1TxD 

(Bit-0) 








‘ A x L1ST Driven from Clock High for Both FE Settings 
n Bit- | 2 


\ 
~ - Rx Sampled Here 


Figure 20-14. Clock Edge (CE) Effect when DSC = 0 
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CE=0 


LiCLK 
LISYNC ~ 


LISYNC 


LITXD 
(Bit-0) 


LIST is Driven from Clock Low 
LIST in Both the FE Settings a 


(On Bit-0) hoe eons Ra 








\ 
“ - Rx Sampled Here 


Figure 20-15. Clock Edge (CE) Effect when DSC = 1 


Figure 20-16 shows SIMODE[FE] behavior with SIMODE[CE] set and no frame sync 
delay. 
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xFSD=0 


) | (FE=0) 





The L1ST is Driven from Sync. 
\ Data is Driven from Clock Low. 


: -- Rx Sampled Here 














L1ST is Driven from Clock High. 











Both Data Bit-0 and L1ST are 
Driven from Sync. 








L1ST and Data Bit-0 is Driven 
from Clock Low. 


Figure 20-16. Frame Transfers when xFSD = 0 and CE = 1 
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Figure 20-17 shows SIMODE[FE] behavior when SIMODE|[CE] and SIMODE[xFSD] are 
zero. 


CE=0 xFSD=0 


LiCLK 


LISYNC 


LiTXD 
(Bit-0) 


The L1ST is Driven from Syne. 
Data is Driven From Clock High. 


LiST 
(On Bit-0) 





\ - 
~~~ Rx Sampled Here... 





LISYNC 


LITXD 
(Bit-0) 


L1ST 
(On Bit-0) 


LISYNC 


LiTXD rt ae oS . : te 
te as Mee Both the Data and L1ST from Sync 
when Asserted during Clock High. 






L1ST 
(On Bit-0) 











LiSYNC 
LITXD 
(Bit-0) 4 es mre pores 
~~ ed Both the Data and L1ST from the Clock = 
(on Bie) ) a ae when Asserted during Clock Low. ee 


Figure 20-17. CE = 0 and FE Interaction with xFSD = 0 


20.2.4.3 SI Clock Route Register (SICR) 


The SI clock route register (SICR), shown in Figure 20-18, selects the SCC clock source 
from one of four baud rate generators or an input from the bank of clock pins. The SICR 
also connects the SCCs to the TSA and enables the grant mechanism chosen in SIMODE. 
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Figure 20-18. SI Clock Route Register (SICR) 
Table 20-6 describes the SICR fields. 
Table 20-6. SICR Field Descriptions 


Reserved, should be cleared. 


Grant support of SCCx. 
0 Transmitter does not support the grant mechanism. The grant is always asserted internally. 
1 Transmitter supports the grant mechanism as determined by SIMODE[GMx]. 


SCCx connection. 

0 SCCx is not connected to the TSA. It is either connected directly to the NMSI pins or is not used. 
The choice of general-purpose I/O port versus SCCx functionality is made in the parallel I/O 
control register; see Chapter 34, “Parallel I/O Ports.” 

1 SCCx is connected to the multiplexed SI. NUMSIx receive pins can be used for other purposes. 


10-12, |R3CS, | Receive/transmit clock source for SCCx. Ignored when SCCx is connected to the TSA (SCx = 1). 
18-20 |}R2CS {000 BRG1. | 
BRG2. 
13-15, BRG3. 
21-23 BRG4. 
CLK1 


CLK2 
CLK3 
CLK4 


24-25 pa Reserved, should be cleared. 


26-28 |RiCS | Clock source for the USB. 


29-31 p= Reserved, should be cleared. 
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20.2.4.4 Si Command Register (SICMR) | 


The SI command register (SICMR) is used to swap the SI RAM routing. SICMR 
commands are valid only when the SI RAM is partitioned for dynamic changes; that is, 
when SIGMR[RDM] = 0b01. See Section 20.2.3.3, “SI RAM Dynamic Changes.’ 





Figure 20-19. Si Command Register (SICMR) 
Table 20-7 describes the SICMR fields. 
Table 20-7. SICMR Field Descriptions | 


Ed 


i CSRRa | Change shadow RAM for TDMa receiver/transmitter. Set by the user; cleared by the SI when the - 











swap completes. 
1 CSRTa |Q The shadow RAM is invalid. The shadow RAM can be written-to program a new routing. 
1 The shadow RAM is valid. The SI swaps the RAMs, taking the new routing from the shadow RAM. 


2-7 |- | Reserved, should be cleared. . 


20.2.4.5 Si Status Register (SISTR) 


The SI status register (SISTR) indicates which part of the SI RAM is the current-route 
RAM. The value of SISTR is valid only when the corresponding SICMR bit is clear. 


CRORa CROTa 


OxAE6 


Figure 20-20. SI Status Register (SISTR) 
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Table 20-8 describes the SISTR fields. 
Table 20-8. SISTR Field Descriptions 


Ce 
CRORa | Address of the current route of TDMa receiver. 
0 Address 0-127 when SIGMR[RDM] = 01. 
1 Address 128-255 when SIGMR[RDMN] = 01. 
1 CROTa 
10 Address 256-383 when SIGMR[RDM] = 01. 
1 Address 384-511 when SIGMR[RDM] = 01. 
2-7 ]— Reserved, should be cleared. 
20.2.4.6 SI RAM Pointer Register (SIRP) 


The SI RAM pointer (SIRP) register, shown in Figure 20-21, indicates the RAM entry 
currently being serviced. SIRP gives the real-time status location of the SI inside a TDM 
frame —useful for debugging and synchronizing system activity with the TDM’s activity. 
However, simply reading the status register SISTR is sufficient for most applications. 










Address of the current route of TDMa transmitter. 






The user can determine which RAM entry in the SI RAM is in progress, but cannot 
determine the status within that entry. For example, if the SIRP indicates an SI] RAM entry 
is active, but the entry is programmed to select four contiguous 8-bit time slots of a TDM, 
it cannot be determined which of the four time slots is in progress. However, SIRP updates 
the status as soon as the next SI RAM entry begins processing. The value of SIRP changes 
on serial clock transitions. Before acting on the information in this register, perform two 
reads to verify the same value is returned. 


One of the eight strobes can be connected externally to an interrupt pin to generate an 
interrupt on a particular SI RAM entry to start or stop TSA execution. 


The pointers in SIRP indicate the SI RAM entry word offset that is in progress. 


po | VT TaPTR2 eee VT TaPTRI 





Figure 20-21. Si RAM Pointer Register (SIRP) 
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Table 20-9 describes SIRP fields. 


Table 20-9. SIRP Field Descriptions 





frame neon 
0-1, 8-9, Reserved, should be cleared. 
16-17, 24-25 
2,10,18,26 |VRn, Valid if set. Knowing whether an entry is valid (active) helps when the PTR value is zero. 
VTn The V bits eliminate having to read both SIRP and SISTR. 


3-7, 11-15, RaPTRn, | Transmit/receive S! RAM entry pointers. Incremented by one for each entry processed. 
19-23, 27-31 |TaPTRn | These 5-bit pointers’ values range from 0-31, corresponding to 32 SI RAM entries, 

although the entire range may not be used. For instance, if SIRAM[LST] is set in the fifth 
entry, the pointer reflects values O—4. When the SI processes the fifth, the pointer returns 
to 0. Pointer values are described in Table 20-10, and are based on SIGMR[RDM]. 
























Table 20-10 describes the pointer values as affected by SIGMR[RDM]. 
Table 20-10. SIRP Pointer Values 


RDM Configuration . 
a RaPTR1/TaPTRi point to the first 32 entries and RbPTR/TaPTR point to the second 32 entries. 


RaPTRn and TaPTRn point to the active Rx and Tx entries, respectively. When the SI services entries 1-32, 
RaPTR1/TaPTR1 is incremented and RaPTR2/TaPTR2 is continuously cleared. Conversely, when the SI 
services entries 33-64, RaPTR1/TaPTR1 is continuously cleared and RaPTR2/TaPTR2 is incremented. 


For the receiver, whether RaPTR1 or RaPTR2 is used depends on which portion of the SI Rx RAM is active 
(V-bit set). Likewise, whether TaPTR1 or TaPTR2 is used depends on which portion of the Tx RAM is active. 
- If VRi = 1, RaPTR1 points to the active RXa entry. The Rx address block is 0-127; SISTR[CRORa] = 0. 
* If VR2 = 1, RaPTR2 points to the active RXa entry. The Rx address block is 128-255; SISTR[CRORa] = 1. | 
* If VT1 =1, TaPTR1 points to the active TXa entry. The Tx address block is 256-383; SISTR[CROTa] = 
- If VT2 = 1, TaPTR2 points to the active TXa entry. The Tx address block is 384—511; SISTR[CROTa] = 1. 





20.2.5 IDL Bus Implementation 


The full-duplex ISDN interchip digital link (IDL) interface connects a physical layer device 
to the MPC850. The basic and primary rate of the IDL bus is supported by the MPC850. In 
the basic rate, data on three channels (B1, B2, and D) is transferred in a 20-bit frame, 
providing a full-duplex bandwidth of 160 Kbps. The MPC850 is an IDL slave device that 
is clocked by the IDL bus master (physical layer device) and has separate receive and 
transmit sections. Using the TDM, the MPC850 supports one IDL bus as shown in 
Figure 20-22. 
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Figure 20-22. IDL Bus Application Example 


20.2.5.1 ISDN Terminal Adaptor Application 


An example IDL application is the ISDN terminal adaptor shown in Figure 20-23. In such 
an application, the [DL interface connects the 2B+D channels between the MPC850, 
CODEC, and S/T transceiver. An SCC is configured in HDLC mode to handle the D 
channel. Another SCC is used to rate adapt the terminal data stream over the first B channel. 
This SCC is configured for HDLC mode if V.120 rate adaptation is required. The second B 
channel is then routed to the CODEC as a digital voice channel, if preferred. The SPI is used 
to send initialization commands and periodically check status from the S/T transceiver. The 
SMC connected to the terminal is configured for UART. 
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Figure 20-23. ISDN Terminal Adaptor Using IDL 
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The MPC850 can identify and support each IDL channel or it can output strobe lines for 
interfacing with devices that do not support the IDL bus. The IDL signals for each transmit 
and receive channel are as follows: _ 


e LiRCLKa—IDL clock. Input to the MPC850. 


e LIRSYNCa—IDL sync signal. Input to the MPC850. This signal indicates that the 
clock periods following the pulse designate the IDL frame. 


¢ LIRXDa—IDL receive data. Input to the MPC850. Valid only for bits supported by 
the IDL; ignored for other signals that may be present. 


¢ LITXDa—IDL transmit data. Output from the MPC850. Valid only for bits 
supported by the IDL; otherwise, three-stated. 


¢ LIRQa—IDL request permission to transmit on the D channel. Output from the 
MPC850 on LI RQa. 


¢ L1iGRa—IDL grant permission to transmit on the D channel. Input to the MPC850 
on LITSYNCa. | 
The basic rate IDL bus has three channels: 


¢ BI is a 64-Kbps bearer channel 
¢ B2 is a 64-Kbps bearer channel 
© Disa 16-Kbps signaling channel 





There are two definitions of the IDL bus frame structure—8- and 10-bit. The only 
difference between them is the channel order within the frame. See Figure 20-24. 
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10-Bit IDL 


LICLK 


LISYNC | | 


L1TXD 





8-Bit IDL 


LiCLK 


LISYNC a 


Notes: 
1. Clocks are not to scale. 
2. LIRQx and L1GRx are not shown. 


Figure 20-24. IDL Bus Signals 


Note that previous versions of Motorola IDL-defined bit functions called auxiliary (A) and 
maintenance (M) were removed from the IDL definition when it was concluded that the 
IDL control channel would be out-of-band. These functions were defined as a subset of the 
Motorola SPI format called serial control port (SCP). To implement the A and M bits as 
originally defined, program the TSA to access these bits and route them transparently to an 
SCC or SMC. Use the SPI to perform out-of-band signaling. 


The MPC850 supports all channels of the IDL bus in the basic rate. Each bit in the IDL 
frame can be routed to any SCC and SMC or they can assert a strobe output that supports 
an external device. 


The MPC850 supports the request-grant method for contention detection on the D channel 
of the IDL basic rate and when the MPC850 has data to send on the D channel, it asserts 
L1RQa. The physical layer device monitors the physical layer bus for activity on the D 
channel and indicates that the channel is free by asserting L1GRa. The MPC850 samples 
L1GRa when the IDL sync signal (LIRSYNCa) is asserted. If L1GRa is asserted, the 
MPC850 sends the first zero of the opening flag in the first bit of the D channel. If a collision 
is detected on the D channel, the physical layer device negates L1GRa. The MPC850 then 
stops its transmission and resends the frame when L1GRa 1s reasserted. This procedure is 
handled automatically for the first two buffers of a frame. 
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For the primary rate IDL, the MPC850 supports up to four 8-bit channels in the frame, 
determined by the SI RAM programming. Additionally, the MPC850 can assert strobes to 
support additional external IDL channels. The IDL interface supports the CCITT 1.460 
recommendation for data rate adaptation since it separately accesses each bit of the IDL 
bus. The current-route RAM specifies the bits that are supported by the IDL interface and 
the serial controller. The receiver accepts only the bits enabled by the Rx route RAM. 
Likewise, the transmitter sends only the bits enabled in the Tx route RAM and three-states 
L1TXDa. 


20.2.5.2 Programming the IDL Interface 


To program the IDL interface, first program SIMODE[GMa] to the IDL grant mode for that 
channel. If the receive and transmit sections interface to the same IDL bus, set 
SIMODE[CRTa] to internally connect the Rx clock and sync signals to the transmit section. 
Then program the SI RAM used for the IDL channels to the preferred routing. See 
Section 20.2.3.6, “SI RAM Programming Example.” 


Define the IDL frame structure by programming SIMODE[xFSD] to have a 1-bit delay 
from frame sync to data, SIMODE[FE] to sample the sync on the falling edge, and 
SIMODE[CE] to transmit on the rising edge of the clock. Program L1TXDa to be 
three-stated when inactive via the parallel I/O open-drain register. To support the D channel, 
set the appropriate SICR[GR] bit and program the RAM entry to route data to the chosen 
SCC. The two definitions of IDL, 8- and 10-bit, are only supported by modifying the SI 
RAM programming. In both cases, L1GRa is sampled with LITSYNCa and transferred to 
the D-channel SCC as a grant indication.For example, based on the same 10-bit format as 
in Section 20.2.3.6, “SI RAM Programming Example,’ implement an IDL bus using SCC2, 
SCC3, and SMC2 connected to the TDM channel as follows: 


1. Program both the Rx and Tx sections of the SIRAM as in Table 20-11. Write unused 
entries with 0x0001_ 0000. 
Table 20-11. Si RAM Settings for IDL Interface 


Entry 
= oe 


2. SIMODE = 0x8000_0145. TDMa is used. SMC2 is connected to the TSA. 


3. SICR = 0x00C0_4000. SCC2 and SCC3 are connected to the TSA. SCC3 supports 
the grant mechanism since it is on the D channel. 


4. pee =]. ee L1TXDa to be an open-drain output. 
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PAPAR[7-—9] = 0b111. Configure L1TXDa, LIRXDa, and LIRCLKa. 
PADIR[7-9] = 0b011. Configure LITXDa, LIRXDa, and LIRCLKa. 
PCPAR[12,5,11] = 1. Configure LIRQa, LITSYNCa, and LIRSYNCa. 


PCDIR[12] = 0. L1RQa is an output. LITS YNCa performs the L1GRa grant 
function and is therefore an input but does not need to be configured by clearing 
PCDIR[5]. LIRS YNCa is an input but does not need to be configured in PCDIR. 


9. SIGMR = 0x04. Enable TDMa (static TDM). 
10.SICMR is not used. 


11.SISTR and SIRP do not need to be read, but can be used for debugging once the 
channels are enabled. 


12. Enable SCC3 for HDLC operation (to handle the LAPD protocol of the D channel), 
and configure SCC2 and SMC2 as needed. 


20.2.6 GCI Bus Implementation 


The MPC850 fully supports both the normal mode (also known as ISDN-oriented modular 
rev 2.2 (OM-2)) and the SCIT mode of the general circuit interface (GCI). It also supports 
the D channel access control in S/T interface terminals by using the command/indication 


(C/T) channel. 


The GCI bus consists of four signals —two data lines, a clock, and a frame synchronization 
line. Usually, an 8-KHz frame structure defines the various channels within the 256 Kbps 
data rate. The MPC850 supports an independent GCI bus with independent receive and 
transmit sections. With a data rate of 2,048 Kbps, the interface can also be used in a 
multiplexed frame structure on which up to eight physical layer devices multiplex their GCI 
channels. 


In the GCI bus, the clock rate is twice the data rate. The SI divides the input clock by two 
to produce the data clock. The MPC850 also has data strobe lines used as an interface for 
devices that do not support the GCI bus. Shown in Figure 20-25, the GCI signals for each 
Tx and Rx channel are as follows: 


e LIRSYNCa— Used as a GCI sync signal. Input to the MPC850. The clock periods 
following the sync pulse designate the GCI frame. 


e LIRCLKa— Used as a GCI clock. Input to the MPC850. The LIRCLKa signal is 
twice the data clock. 


e LIRXDa—Used as a GCI receive data. Input to the MPC850. 


e L1TXDa— Used as a GCI transmit data. Open-drain output. Driven only for the bits 
that are programmed in the SI RAM. Otherwise, it is three-stated. 
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LICLK 
(2X the Data Rate) 


LiSYNC | | 
a a TO SO 


Note: Clock is not to scale. 
Figure 20-25. GCI Bus Signals 


In addition to the 144-Kbps ISDN 2B+D channels, the GCI provides two channels for 
maintenance and control: 


¢ Bl is a64-Kbps bearer channel 
e B2 is a 64-Kbps bearer channel 
e Mis a64-Kbps monitor channel 


e Disa 16-Kbps signaling channel 
| e C/Lis a 48-Kbps command/indication channel (includes A and E bits) 


The M channel is used to transfer data between layer-1 devices and the control unit (the 
core) and the C/I channel is used to control activation/deactivation procedures or to switch 
test loops by the control unit. The M and C/I channels of the GCI bus should be routed to 
SMC1 or SMC2, which have modes to support the channel protocols. The MPC850 can 
support any channel of the GCI bus in the primary rate by modifying the SI RAM 
programming. 


The GCI supports the CCITT 1.460 recommendation as a method for data rate adaptation 
since it can access each bit of the GCI separately. The current-route RAM specifies which 
bits are supported by the interface and serial controller. The receiver accepts only the bits 
that are enabled by the SI RAM. The transmitter sends only the bits that are enabled by the 
SI RAM and does not drive L1TXDa otherwise. L1TXDa is an open-drain output and 
should be pulled high externally. 


The MPC850 supports contention detection on the D channel of the SCIT bus. When the 
MPC8S50 has data to send on the D channel, it checks an SCIT bus bit that is marked with 
a special route code (usually, bit 4 of C/I channel 2). The physical layer device monitors the 
physical layer bus for activity on the D channel and indicates on this bit that the channel is 
free. If a collision is detected on the D channel, the physical layer device drives bit 4 of C/I 
channel 2 to logic high. The MPC850 then aborts its transmission and resends the frame 
when this bit is driven to logic low again. This procedure is automatically handled for the 
first two buffers of a frame. 
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20.2.6.1 GCI Activation/Deactivation 


In the deactivated state, the clock pulse is disabled and the data line is at a logic one. The 
layer-1 device activates the MPC850 by enabling the clock pulses and sending an indication 
on the C/I channel 0. To report the arrival of a valid indication in the SMC’s RxBD, the 
CPM sends a maskable interrupt to the core. 


When the core activates the line, the data output of LIT XDa should be programmed to zero 
by setting SIMODE[STZa]. Code 0 (command timing TIM) is sent on C/I channel 0 to the 
layer-1 device until STZa is cleared. The physical layer device resumes the clock pulses and 
gives an indication on C/I channel 0. The core should then clear STZa to enable data output. 


20.2.6.2 Programming the GCI Interface 


The two GCI interface modes, normal and SCIT, are described in the following sections. 


20.2.6.2.1 Normal Mode 

For normal mode operation, first program the channels’ SIMODE[DSCa, FEa, CEa, 
RFSDa] for GCI/SCIT mode, defining the sync pulse to GCI sync for framing and the data 
clock as one-half the input clock rate. Also, if the receive and transmit sections are used to 
interface with the same GCI bus, set SIMODE[CRTa] to internally connect the Rx clock 
and sync signals to the SI RAM transmit section. Then define the GCI frame routing and 
strobe select using the SI RAM. 


When the receive and transmit sections use the same clock and sync signals, the sections 
should use the same configuration. Also, L1TXDa in the I/O register should be configured 
as an open-drain output. To support the monitor and C/I channels in GCI, those channels 
should be routed to an SMC. To support the D channel when there is no possibility of 
collision, clear SICR[GRa] for the SCC that supports the D channel. 


20.2.6.2.2 SCIT Mode 


To interface with the GCI/SCIT bus, configure SIMODE for basic GCI/SCIT operation. 
Then program the SI RAM to support a 96-bit frame length and the frame sync to be the 
GCI sync pulse. Generally, the SCIT bus supports the D channel access collision 
mechanism. For this purpose, set SIMODE[CRTa] so the receive and transmit sections use 
the same clock and sync signals and program SICR[GRa] to transfer the D channel grant 
to the supporting SCC. The received bit (grant) should be marked by programming the 
CSEL (channel select) bits of the SI RAM to 0b111 for an internal assertion of a strobe. 
This bit is sampled by the SI and transferred to the D-channel SCC as the grant. The grant 
is generally bit 4 of the C/I in channel 2 of the GCI bus, but any bit slot can be selected in 
the SIRAM. 
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20.2.6.3 GCI Interface (SCIT Mode) Programming Example 
Assuming SCC2 is connected to the B1 channel, SMC2 to the B2 channel, SCC3 to the D 
channel, and SMC1 to the C/I channels, the initialization sequence is as follows: 


1. Program both the Rx and Tx sections of the SI RAM as shown in Table 20-12. Write 
all unused entries with 0x0001_0000. Note that this example is for SCIT mode. For 
normal mode, delete the last three entries in Table 20-12 and set the LST bit in the 
new last entry. 


Table 20-12. SI RAM Settings for GCI Interface (SCIT Mode) 


8 bits SMC2 (B2)_ 


i Ee 
ee 
[ao 
stetettee 6 bits SMC1 (1+ A+E) 
a Spee 
| 900 po | 

Lc Ee 











Description 


8 bits SCC2 (B1) 


0110. 
0001 Skip 2 bits 


Ze SIMODE = Ox8000_80E0. TDMa is used. SMC1 and SMC2 are connected. 


3. SICR = Ox00CO_4000. SCC2 and SCC3 are connected to the TSA. SCC3 supports 
the grant mechanism since it is on the D channel. 


PAODR[9] = 1. Configure L1TXDa to be an open-drain output. 
PAPAR[7-9] = 0b111. Configure L1TXDa, LIRXDa, and LIRCLKa. 
-PADIR[7-—9] = 0b011. Configure L1TXDa, LIRXDa, and LIRCLKa. 
. PCPAR[4] = 1. Configure LIRSYNCa. 

SIGMR = 0x04. Enable TDMa aaa TDM). 

. SICMR is not used. 


10.SISTR and SIRP do not need to be read but can be used for debugging when 
channels are enabled. 


11.Enable SCC3 for HDLC operation (to handle the LAPD protocol of the D channel), 
configure SCC2 and SMC2 as needed and enable SMC1 for SCIT operation. 








ae ee ae 
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20.3 NMSI Configuration 


The SI supports a non-multiplexed serial interface (NMSJI) mode for the SCCs and SMCs. 
The decision of whether to connect the SCCs to the NMSI is made in the SICR; the SMCs 
are connected through SIMODE. An SCC or SMC can be connected to the NMSI, 
regardless of the other channels connected to a TDM channel. However, NMSI pins can be 
multiplexed with other functions at the parallel I/O lines. Therefore, if a combination of 
TDM and NMSI channels are used, the decision of which SCC and SMC to connect and 
where to connect them should be made by consulting the pinout in Chapter 12, “External 
Signals.” 


The clocks that are provided to the USB, the SCCs and SMCs are derived from four internal 
baud rate generators and four external CLK pins. There are two main advantages to this 
bank-of-clocks approach. First, the USB, an SCC or SMC 1s not forced to choose its clock 
from a predefined pin or baud rate generator. Second, if a group of SCC receivers and 
transmitters need the same clock rate they can share the same pin, leaving other pins 
available other functions and minimizing the potential skew between multiple clock 
sources. 


The baud rate generators also make their clocks available to external logic, regardless of 
whether the BRGs are being used by an SCC or SMC. The BRGOn pins are multiplexed 
with other functions, so all BRGOn pins may not always be available. Note that there is no 
BRGO4 to make BRG4 available externally. Chapter 12, “External Signals.” 


e The bank-of-clocks mapping has one restriction: the SMC transmitter must have the 
same clock source as the receiver when connected to the NMSI pins. 


Once the clock source is selected, the clock is given an internal name. For the USB, the 
clock is named USBCLK. For the SCCs, the name is RCLKx and TCLK~x and for the 
SMCs, the name is simply SMCLK~. These internal names are used only in NMSI mode to 
specify the clock that is sent to the SCC or SMC. These names do not correspond to 
physical pins on the MPC850. Note the internal RCLKx and TCLK<x can be used as inputs 
to the DPLL unit, which is inside the SCCx; thus, RCLKx and TCLKx are not always 
required to reflect the actual bit rate on the line. 


The signals available to the USB, each SCC and SMC in NMSI mode are shown in 
Figure 20-26. 
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BRG1 BRG2 BRG3 BRG4 
BRGO1 
BRGO2 
ieee sae 










SCC3 RCLK3 | 
Rx 


-(scc3 TCLK3 | 


CLK1 
Tx 


SCC2 | RCLK2 | 


scc2 |, TOLK2 | Bank of Clocks 


Tx. Selection Logic 


CLK2 


CLK3 


USBCLK| 
USB : 


SMC1 CLK4 


SMCLK1] 


| _SCCs and USBCLK controlled in SICR. 
SMCLK2 


SMC2 


The USB has its own set of modem control signals: 


e USBRXD 

e USBRXP 

e USBTXP 

e USBCLK < BRGI-BRG4, CLK 1—CLK4 
e USBRXN 

e USBTXN 

¢ USBOE 


The SCC2 in NMSI mode has its own set of modem control signals: 


e TXD2 
e RXD2 
e TCLK2 < BRGI-BRG4, CLK1-—CLK4 
¢ RCLK2 < BRG1I-BRG4, CLK1—CLK4 
¢ RTS2 
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The SCC3 in NMSI mode has its own set of modem control signals: 


e TXD3 
e RXD3 
e TCLK3 <— BRGI-BRG4, CLK1—CLK4 
e RCLK3 <— BRG1I—-BRG4, CLK1—CLK4 


¢ RTS3 
¢ CTS3 
° CD3 
The SMC1 in NMSI mode has its own set of modem control signals: 
e SMTXD1 
e SMRXD1 


e SMCLK1 < BRG1-BRG4, CLK1—CLK4 
° SMSYNI1 (used only in the totally transparent protocol) 


The SMC2 in NMSI mode has its own set of modem control signals: 





e SMTXD2 

e SMRXD2 

e¢ SMCLK2 < BRGI—-BRG4, CLK1—CLK4 

¢ SMSYN2 (used only in the totally transparent protocol) 


Unused USB, SCC or SMC signals can be used for other functions or configured for 
parallel I/O. 


20.4 Baud Rate Generators (BRGs) 


The CPM contains four independent, identical baud rate generators (BRG) that can be used 
with the SCCs and SMCs. The clocks produced by the BRGs are sent to the bank-of-clocks 
selection logic, where they can be routed to the SCCs and/or SMCs. In addition, the output 
of a BRG can be routed to a pin to be used externally. The following is a list of baud rate 
generators’ main features: 

e Four independent and identical baud rate generators 

¢ On-the-fly changes allowed 

e Each baud rate generator can be routed to one or more SCCs or SMCs 

e A 16x divider option allows slow baud rates at high system frequencies 

e Each BRG contains an autobaud support option 

e Each BRG output (except BRG4) can be routed to a pin (BRGOn) 
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Figure 20-27 shows a baud rate generator. 


CD[0-11 


CLK2 Pin 
Prescaler BRGOn Clock 


, Divide by To Pin and/or 
LK4 Pin : . 
: : 1 or 16 ae pa Bank of Clocks 











Autobaud 
Control 








Figure 20-27. Baud Rate Generator (BRG) Block Diagram 


The BRG clock source can be BRGCLK, CLK2, or CLK4 (selected in BRGCn[EXTC}). 
The BRGCLK is generated in the MPC850 clock synthesizer as a source specifically for 
the BRGs, the SPI, and the IC internal baud rate generator. Alternatively, the CLK2 and 
CLK4 pins can be configured as clock sources. These external source options allow flexible 
baud rate frequency generation, independent of the system frequency. Additionally, CLK2 
and CLK4 allow a single external frequency to be the source for multiple BRGs. Note that 
the CLK2 and CLK4 signals are not synchronized internally before being used by the BRG. 


The BRG provides a divide-by-16 option (BRGCn[DIV16]) and a 12-bit prescaler 
(BRGCn[CD]) to divide the source clock frequency. The combined source-clock divide 
factor can be changed on-the-fly; however, two changes should not occur within a time 
equal to two source clock periods. 3 


The prescaler output is sent internally to the bank of clocks and can also be output 
externally on BRGOn (except BRGO4) through either the port A or port B parallel I/O. If 
the BRG divides the clock by an even value, the transitions of BRGOn always occur on the 
falling edge of the source clock. If the divide factor is an odd value, the transitions alternate 
between the falling and rising edges of the source clock. Additionally, the output of the 
BRG can be sent to the autobaud control block. 


20.4.1 Baud Rate Generator Configuration Registers (BRGCn) 


Each baud rate generator configuration register (BRGC), shown in Figure 20-28, is cleared 
at reset. A reset disables the BRG and drives the BRGO output clock high. The BRGC can 
be written at any time with no need to disable the SCCs or external devices that are 
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connected to BRGO. Configuration changes occur at the end of the next BRG clock cycle 
(no spikes occur on the BRGO output clock). BRGC can be changed on-the-fly; however, 
two changes should not occur within a time equal to two source clock periods. 





Ox9F2 (BRGC1), 0x9F6 (BRGC2), Ox9FA (BRGC3), Ox9FE (BRGC4) 
Figure 20-28. Baud Rate Generator Configuration Registers (BRGCn) 


Table 20-13 describes the BRGCn fields. 





Tabie 20-13. BRGCn Field Descriptions 


Reserved, should be cleared. 


Reset BRG. Performs a software reset of the BRG identical to that of an external reset. A reset 
disables the BRG and drives BRGO high. This is externally visible only if BRGO is connected to the 
corresponding parallel I/O pin. 

0 Enable the BRG. 

1 Reset the BRG (software reset). 


Enable BRG count. Used to dynamically stop the BRG from counting — useful for low-power modes. 
0 Stop all clocks to the BRG. 
1 Enable clocks to the BRG. 


16-17 | EXTC | External clock source. Selects the BRG input clock. 
00 BRGCLK (internal clock generated by the clock synthesizer in the SIV). 
01 CLK2 
10 CLK4 
11 Reserved. 


18 ATB __ | Autobaud. Selects autobaud operation of the BRG on the corresponding RXD. ATB must remain zero 
until the SCC receives the three Rx clocks. Then the user must set ATB to obtain the correct baud rate. 
After the baud rate is obtained and locked, it is indicated by setting AB in the UART event register. 


0 Normal operation of the BRG. 
1 When RXD goes low, the BRG determines the length of the start bit and synchronizes the BRG to 
the actual baud rate. 
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_ Table 20-13. BRGCn Field Descriptions (Continued) 


EN 


19-30 | CD Clock divider. CD presets an internal 12-bit counter that is decremented at the DIV16 output rate. 
When the counter reaches zero, it is reloaded with CD. CD = OxFFF produces the minimum clock rate 
for BGRO (divide by 4,096); CD = 0x000 produces the maximum rate (divide by 1). When dividing by 


an odd number, the counter ensures a 50% duty-cycle by asserting the terminal count once on clock 
low and next on clock high. The terminal count signals counter expiration and toggles the clock. 





DIV16 | Divide-by-16. Selects a divide-by-1 or divide-by-16 prescaler before reaching the clock divider. 


20. 4.2 Autobaud Operation on a UART 


During the autobaud process,a UART deduces the baud rate of its reeves character stream 
by examining the received pattern and its timing. A built-in autobaud control function 
automatically measures the length of a start bit and modifies the baud rate accordingly. 


If the autobaud bit BRGCn[ATB] is set, the autobaud control function starts searching for 
a low level on the corresponding RXDn input, which it assumes marks the beginning of a 
start bit, and begins counting the start bit length. During this time, the BRG output clock 
toggles for 16 BRG clock cycles at the BRG source clock rate and then tops with BRGOn 
in the low state. 
When RXDn goes high again, the autobaud control block rewrites BRGCn[CD, DIV 16] to 
the divide ratio found, which at high baud rates may not be exactly the final rate desired (for 
example, 56,600 could be the result, rather than 57,600). An interrupt can be enabled in the 
UART SCC event register to report that the autobaud controller rewrote BRGCn. The 
interrupt handler can then adjust BRGCn[CD, DIV16] for accuracy before the first 
character is fully received, ensuring that the UART recognizes all characters. 


After a full character is received, the software can verify that the character matches a 
predefined value (such as ‘a’ or ‘A’). Software should then check for other characters (such | 
as ‘t’ or “T’) and program the preferred parity mode in the UART’s ee: specific mode | 
register (PSMR). 


Note that the SCC associated with this BRG must be programmed to UART mode and 
select the 16x option for TDCR and RDCR in the general SCC mode register low. Input 
frequencies such as 1.8432, 3.68, 7.36, and 14.72 MHz should be used. The SCC 
performing the autobaud function must be connected to that SCC’s BRG; that is, SCC2 
must be clocked by BRG2, and so on. 


Also, to detect an autobaud lock and generate an interrupt, the SCC must receive three full 
Rx clocks from the BRG before the autobaud process begins. To do this, first clear 
BRGCn[ATB] and enable the BRG Rx clock to the highest frequency. Then, immediately 
before the autobaud process starts (after device initialization), set BRGCn[ATB]. 
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For synchronous communication using the internal BRG, the BRGO output clock must not 
exceed the system frequency divided by 2. So, with a 25-MHz system frequency, the 
maximum BRGO rate is 12.5 MHz. Program the UART to 16x oversampling when using 
the SCC as a UART. Rates of 8x and 32x are also available. Assuming 16x oversampling 
is chosen in the UART, the maximum data rate is 25 MHz + 16 = 1.5625 Mbps. Keeping 
the above in mind, use the following formula to calculate the bit rate based on a particular 
BRG configuration for a UART: 


async baud rate = (BRGCLK or CLK2 or CLK4) + (1 or 16 according to BRGCx[DIV 16}) + (clock divider + 1) + (8, 
16, or 32 according to GSMR_L{TDCR, RDCR] in the general SCC mode register low) 


Table 20-14 lists typical bit rates of asynchronous communication. Notice that here the 
internal clock rate is assumed to be 16x the baud rate; that 1s, 
GSMR_L[TDCR] = GSMR_L[RDCR] = 0b10. 


Table 20-14. Typical Baud Rates for Asynchronous Communication 
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For synchronous communication, the internal clock is identical to the baud rate output. To 
get the preferred rate, select the system clock according to the following: 
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sync baud rate = (BRGCLK or CLK2 or CLK4) = (1 or 16 according to BRGCx[DIV16]) + (clock divider + 1) 


For example, to get a rate of 64 Kbps, the system clock can be 24.96 MHz, DIV16 = 0, and 
the clock divider = 389. 
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Chapter 21 
Serial Communications Controllers 


The MPC850 has two serial communications controllers (SCC), which can be configured 
independently to implement different protocols for bridging functions, routers, and 
gateways, and to interface with a wide variety of standard WANs, LANs, and proprietary 
networks. An SCC has many physical interface options such as interfacing to TDM buses, 
ISDN buses, and standard modem interfaces. 


The SCCs are independent from the physical interface, but SCC logic formats and 
manipulates data from the physical interface. Furthermore, the choice of protocol is 
independent from the choice of interface. An SCC is described in terms of the protocol it 
runs. When an SCC is programmed to a certain protocol or mode, it implements 
functionality that corresponds to parts of the protocol’s link layer (layer 2 of the OSI 
reference model). Many SCC functions are common to protocols of the following 
controllers: 


e UART, described in Chapter 22, “SCC UART Mode.’ 
e HDLC and HDLC bus, described in Chapter 23, “SCC HDLC Mode.” 


e Asynchronous HDLC, described in Chapter 25, “SCC Asynchronous HDLC 
Mode.” 


e IrDA, described in Chapter 29, “IrDA Mode—SCC2 Only.” 

e AppleTalk/LocalTalk, described in Chapter 24, “SCC AppleTalk Mode.” 
¢ BISYNC, described in Chapter 26, “SCC BISYNC Mode.” 

e Transparent, described in Chapter 28, “SCC Transparent Mode.” 

e Ethernet, described in Chapter 27, “SCC Ethernet Mode.” 


Although the selected protocol usually applies to both the SCC transmitter and receiver, one 
half of an SCC can run transparent operations while the other half runs a standard protocol 
(except Ethernet). 


Each Rx and Tx internal clock can be programmed with either an external or internal 
source. Internal clocks originate from one of two baud rate generators (BRGs) or one of 
four external clock pins; see Section 20.2.4.3, “SI Clock Route Register (SICR),” for each 
SCC’s available clock sources. These clocks can be as fast as a 1:2 ratio of the system clock. 
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(For example, an SCC internal clock can run at 12.5 MHz in a 25-MHz system.) However, 
an SCC’s ability to support a sustained bit stream depends on the protocol as well as other 
factors. See Appendix B, “Serial Communications Performance.” 


Associated with each SCC is a digital phase-locked loop (DPLL) for external clock 
recovery, which supports NRZ, NRZI, FM0O, FM1, Manchester, and Differential 
Manchester. If the clock recovery function is not required (that is, synchronous 
communication), then the DPLL can be disabled, in which case only NRZ and NRZI are 
supported. : | “ 7 | 


An SCC can be connected to its own set of pins on the MPC850. This configuration is called 
the non-multiplexed serial interface (NMSI) and is described in Chapter 20, “Serial 
Interface.” Using NMSI, an SCC can support standard modem interface signals, RTS, CTS, 
and CD, through the port C pins and the CPM interrupt controller (CPIC). If required, 
software and additional parallel I/O lines can be used to support additional handshake 
signals. Figure 21-1 shows the SCC block diagram. | 
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Figure 21-1. SCC Block Diagram 
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21.1 Features 


The following is a list of the main SCC features. (Performance figures assume a 25-MHz 
system clock.) 


e Implements HDLC/SDLC, HDLC bus, asynchronous HDLC, BISYNC, 
synchronous start/stop, asynchronous start/stop (UART), AppleTalk/LocalTalk, and 
totally transparent protocols 


e Supports 10-Mbps Ethernet/IEEE 802.3 (half- or full-duplex) 
e Additional protocols can be added in the future through the use of RAM microcodes. 


e Maximum aggregate receive and transmit bandwidth of all SCCs of approximately 
22 Mbps at 25-MHz system frequency (depending on protocol), scaling up linearly 
with frequency. See Appendix B, “Serial Communications Performance.” 


e Maximum serial clocking rates of 12.5 MHz on a 25-MHz system 


e DPLL circuitry for clock recovery with NRZ, NRZI, FMO, FM1, Manchester, and 
Differential Manchester (also known as Differential Bi-phase-L) 


e Clocks can be derived from a baud rate generator, an external pin, or DPLL 
e Data rate for asynchronous communication can be as high as 3.125 Mbps at 25 MHz 
e Supports automatic control of the RTS, CTS, and CD modem signals 


e Multi-buffer data structure for receive and send (the number of buffer descriptors 
(BDs) is limited only by the size of the internal dual-port RAM—8 bytes per BD) 


e Deep FIFOs (The SCC2 transmit and receive FIFOs are 32 bytes each; the USB and 
SCC3 FIFOs are 16 bytes each.) 


¢ Transmit-on-demand feature decreases time to frame transmission (transmit 
latency) 


e Low FIFO latency option for send and receive in character-oriented and totally 
transparent protocols 


e Frame preamble options 
e Full-duplex operation 


e Fully transparent option for one half of an SCC (Rx/Tx) while another protocol 
executes on the other half (Tx/Rx) 


e cho and local loopback modes for testing 


The SCCs are the same on both the MPC850 and MPC860, except that the MPC850’s 
SCC2 supports a wider range of IrDA signaling rates. Note also that the MPC850 SCCs do 
not support the external CAM for the Ethernet/IEEE 802.3 protocol. 
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21.2 SCC Registers 


Each SCC has a general SCC mode register (GSMR), a protocol-specific mode register 
(PSMR), a data synchronization register (DSR), and a transmit-on-demand register 
(TODR). The SCC supporting registers are described in the following sections. 


21.2.1 General SCC Mode Register (GSMR) 


Each SCC contains a general SCC mode register (GSMR) that defines options common to 
each SCC regardless of the protocol. GSMR_L contains the low-order 32 bits; GSMR_H, 
shown in Figure 21-2, contains the high-order 32 bits. Some GSMR operations are 
described in later sections. 





Figure 21-2. GSMR_H—General SCC Mode Reoietel (High Order) 
Table 21-1 describes GSMR_H fields. 
Table 21-1. GSMR_H Field Descriptions 


Reserved, should be cleared. 


Glitch detect enable. Determines whether the SCC searches for glitches on the external Rx and Tx 

serial clock lines. Regardless of the GDE setting, a Schmitt trigger on the input lines is used to 

reduce signal noise. | | 

0 No glitch detection. Clear GDE if the external serial clock exceeds the limits of glitch detection logic 
(6.25 MHz assuming a 25-MHz system clock), if an internal BRG supplies the SCC clock, or if 
external clocks are used and glitch detection matters less than power consumption. 

1 Glitches can be detected and reported as maskable interrupts in the SCC event register (SCCE). 
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Table 21-1. GSMR_H Field Descriptions (Continued) 


a ae meetin 


Bit | Name Description 


116-17] TCRC | Transparent CRC (valid for totally transparent channel only). Selects the frame checking provided on 
transparent channels of the SCC (either the receiver, transmitter, or both, as defined by TTX and 
TRX). Although this configuration selects a frame check type, the decision to send the frame check is 
made in the TxBD. Thus, frame checks are not needed in transparent mode and frame check errors 
generated on the receiver can be ignored. 
00 16-bit CCITT CRC (HDLC). (X16 + X12 + X5 + 1). 
01 CRC16 (BISYNC). (X16 + X15 + X2 + 1). 
10 32-bit CCITT CRC (Ethernet and HDLC). 

(X32 + X26 + X23 + X22 + X16 + X12 + X11 + X10 + XB + X7 + XH + X44 X24 X1 + 1). 

11 Reserved. 


mame 


REVD Reverse data (valid for a totally transparent channel only) 
0 Normal operation. 
1 Reverses the bit order for totally transparent channels on this SCC (either the receiver, transmitter, 


or both, as defined by TTX and TRX) and sends the msb of each byte first. Section 26.11, 
“BISYNC Mode Register (PSMR),” describes reversing bit order in a BISYNC protocol. 


119, 20| TRX, | Transparent receiver/transmitter. The receiver, transmitter, or both can use totally transparent 
TTX | operation, regardless of GSMR_L{MODE]. For example, to configure the transmitter as a UART and 
the receiver for totally transparent operation, set MODE = 0b0100 (UART), TTX =0, and TRX = 1. 
0 Normal operation. 
|1 The receiver/transmitter uses totally transparent mode, regardless of the plaice chosen in 
GSMR_L[MODE]. 
For full-duplex totally transparent operation, set both TTX and TRX. 
Note that an SCC cannot operate half in Ethernet mode and half in transparent mode. That is, if 
| MODE = 0b1100 (Ethernet), erratic operation occurs unless TTX = TRX. 


21,22|CDP, |CD/CTS pulse. If this SCC is used in the TSA and is programmed in transparent mode, set CTSP 
CTSP | and refer to Section 28.4.2, “Synchronization and the TSA,” for options on programming CDP. 








0 Normal operation (envelope mode). CD/CTS should envelope the frame. Negating CD/CTS during 
reception causes a CD/CTS lost error. 

1 Pulse mode. Synchronization occurs when CD/CTS is asserted; further CD/CTS transitions do not 
affect reception. 


| )23, 24;CDS, |CD/CTS sampling. Determine synchronization characteristics of CD and CTS. If the SCC is in 
|CTSS | transparent mode and is used in the TSA, CDS and CTSS must be set. Also, CDS and CTSS must 

be set for loopback testing in transparent mode. 

0 CDICTS is assumed to be asynchronous with data. It is internally synchronized by the SCC, then 
data is received (CD) or sent (CTS) after several clock delays. 
CD/CTS is assumed to be synchronous with data, which speeds up operation. CD or CTS must 
transition while the Rx/Tx clock is low, at which time, the transfer begins. Useful for connecting 
MPC850 in transparent mode since the RTS of one MPC850 can connect directly to the CD/CTS 
of another. 


Transmit FIFO length. 

0 Normal operation. The SCC2 transmit FIFO is 32 bytes; the SCC3 Tx FIFO is 16 bytes. 

1 The Tx FIFO is 1 byte. This option is used with character-oriented protocols, such as UART, to 
ensure a minimum FIFO latency at the expense of performance. 
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Table 21-1. GSMR_H Field Descriptions (Continued) 


a 


RFW_ | Rx FIFO width. 
0 Receive FIFO is 32 bits wide for maximum eaneniencs! the Rx FIFO is 32 bytes for SCC2 and 16 | 
bytes for SCC3. Data is not normally written to receive buffers until at least 32 bits are received. 
This configuration is required for HDLC-type protocols and Ethernet and is recommended for 


high-performance transparent protocols. 

Low-latency operation. The receive FIFO is 8 bits wide, reducing the Rx FIFO to a quarter its 
normal size. This allows data to be written to the buffer as soon as a character is received, instead 
of waiting to receive 32 bits. This configuration must be chosen for character-oriented protocols, 
such as UART. It can also be used for low-performance, low-latency, transparent operation. 
However, it must not be used with HDLC, HDLC Bus, AppleTalk, or Ethernet because it causes 
erratic behavior. 


totally transparent mode does not occur until the receiver synchronizes with the bit stream and 
CTS Is asserted to the SCC. Assuming CTS is asserted, transmission begins 8 clocks after the 
receiver starts receiving data. 


28-29 | SYNL | Sync length (BISYNC and transparent mode only). See the data synchronization register (DSR) 
definition in the BISYNC (Section 26.9, “Sending and Receiving the Synchronization Sequence”) and 
totally transparent (Section 28.4.2.1, “In-line Synchronization Pattern”) chapters. 

00 An external sync (CD) is used instead of the sync pattern in the DSR. 
01 4-bit sync. The receiver synchronizes on a 4-bit sync pattern stored in the DSR. This sync and 


TXSY | Transmitter synchronized to the receiver. Intended for X.21 applications where the transmitted data 
must begin an exact multiple of 8-bit periods after the received data arrives. 
0 No synchronization between receiver and transmitter (default). 
1 The transmit bit stream is synchronized to the receiver. Additionally, if RSYN = 1, transmission in 


additional syncs can be stripped by programming the SCC’s parameter RAM for character 
recognition. 

10 8-bit sync. Should be chosen along with the BISYNC protocol to implement mono-sync. The 
receiver synchronizes on an 8-bit sync pattern in the DSR. 

11 16-bit sync. Also called BISYNC. The receiver synchronizes on a 16-bit sync pattern stored in the 
DSR. 


SCC is enabled. 


30 RTSM | RTS mode. Determines whether flags or idles are to be sent. Can be changed on-the-fly. | 
0 Send idles between frames as defined by the protocol and the TEND bit. RTS is negated between 
frames (default). 
1 Send flags/syncs between frames acevong to the protocol. RTS is always asserted whenever the 
31 RSYN | Receive synchronization timing (totally transparent mode only). 
0 Normal operation. 
1 lf CDS = 1, CD should be asserted on the second bit of the Rx frame rather than on the first. 
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Figure 21-3 shows GSMR_L. 





oa. _ 0xA22 (GSMR_L2), 0xA42 (GSMR_L3) 
Figure 21-3. GSMR_L— General SCC Mode Register (Low Order) 





Table 21-2 describes GSMR_L fields. 
Table 21-2. GSMR_L Field Descriptions 


in the received signal. Ignored in UART protocol or if the 1x clock mode is selected in RDCR. 
00 Both the positive and negative edges are used for changing the sample point (default). 
01 Positive edge. Only the positive edge of the received signal is used to change the sample point. 
| 10 Negative edge. Only the negative edge of the received signal is used to change the sample point. 
11 No adjustment is made to the sample point. 


Transmit clock invert. 

0 Normal operation. 
Before it is used, the internal Tx clock (TCLK) is inverted by the SCC so it can clock data out 
one-half clock earlier (on the rising rather than the falling edge). In this case, the SCC offers a 


minimum and maximum rising clock edge-to-data specification. Data output by the SCC after the 
rising edge of an external Tx clock can be latched by the external receiver one clock cycle later on 
the next rising edge of the same Tx clock. Recommended for Ethernet, HDLC, and transparent 
operation when clock rates exceed 8 MHz to improve data setup time for the external transceiver. 


Transmit sense. Determines the amount of time the internal carrier sense signal stays active after the 
last transition on RXD, indicating that the line is free. For instance, AppleTalk can use TSNC to avoid 
a spurious CS-changed (SCCE[DCC)]) interrupt that would otherwise occur during the frame sync 
sequence before the opening flags. If RDCR is configured to 1x clock mode, the delay is the greater 
of the two numbers listed. If RDCR is configured to 8x, 16x, or 32x mode, the delay is the smaller 
number. 

00 Infinite. Carrier sense is always active (default). 

01 14- or 6.5-bit times as determined by RDCR. 

10 4- or 1.5-bit times as determined by RDCR (normally for AppleTalk). 

11 3- or 1-bit times as determined by RDCR. 
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Table 21-2. GSMR_L Field Descriptions (Continued) 


[oe 
RINV | DPLL Rx input invert data. Must be zero in HDLC bus mode or asynchronous UART mode. | 
| 0 Do not invert. 
1 Invert data before sending it to the DPLL for reception. Used to produce FM1 from FMO and NRZIi 
! space from NRZI mark or to invert the data stream in regular NRZ mode. 


TINV | DPLL Tx input invert data. Must be zero in HDLC bus mode. 
0 Do not invert. 
1 Invert data before sending it to the DPLL for transmission. Used to produce FM1 from FMO and 


NRZI space from NRZI mark and to invert the data stream in regular NRZ mode. In T1 applications, 
setting TINV and TEND creates a continuously inverted HDLC data stream. 


8-10 | TPL | Tx preamble length. Determines the length of the preamble configured by the TPP bits. 
000 No preamble (default). 
001 8 bits (1 byte). 

010 16 bits (2 bytes). 
011 32 bits (4 bytes). 

| 1100 48 bits (6 bytes). Select this setting for Ethernet operation. 

101 64 bits (8 bytes). 
110 128 bits (16 bytes). 
111 Reserved. | 


TPP | Tx preamble pattern. Determines what, if any, bit pattern should precede each Tx frame. The 
preamble pattern is sent before the first flag/sync of the frame. TPP is ignored in UART mode. The 
preamble length is programmed in TPL; the preamble pattern is typically sent to a receiving station 


that uses a DPLL for clock recovery. The receiving DPLL uses the regular preamble pattern to help it 
lock onto the received signal in a short, predictable time period. 

00 All zeros. 

01 Repetitive 10s. Select this setting for Ethernet operation. 

10 Repetitive 01s. . 

- 117All ones. Select this setting for LocalTalk operation. 


Transmitter frame ending. intended for NMSI transmitter encoding of the DPLL. TEND determines 

whether TXD should idle in a high state or in an encoded ones state (high or low). It can, however, be 

used with other encodings besides NMSI. 

0 Default operation. TXD is encoded only when data is sent, including the preamble and opening and 
closing flags/syncs. When no data is available to send, the signal is driven high. 

1 TXD is always encoded, even when idles are sent. 


- 


14-15 | TDCR | Transmitter/receiver DPLL clock rate. If the DPLL is not used, choose 1x mode except in 


asynchronous UART mode where 8x, 16x, or 32x must be chosen. TDCR should match RDCR in 
16-17 | RDCR | most applications to allow the transmitter and receiver to use the same clock source. If an application 
uses the DPLL, the selection of TDCR/RDCR depends on the encoding/decoding. If communication 
_ | is synchronous, select 1x. FMO/FM1, Manchester, and Differential Manchester require 8x, 16x, or 
32x. If NRZ- or NRZ!-encoded communication is asynchronous (that is, clock recovery required), 


select 8x, 16x, or 32x. The 8x option allows highest speed, whereas the 32x option provides the 
greatest resolution. 

00 1x clock mode. Only NRZ or NRZI encodings/decodings are allowed. 

01 8x clock mode. 

10 16x clock mode. Normally chosen for UART and AppleTalk. 

11 32x clock mode. 
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Table 21-2. GSMR_L Field Descriptions (Continued) 


5 


RENC | Receiver decoding/transmitter encoding method. Select NRZ if DPLL is not used. RENC should equal 
TENC in most applications. However, do not use this internal DPLL for Ethernet. 

21-23 | TENC | 000 NRZ (default setting if DPLL is not used). Required for UART (synchronous or asynchronous). 

001 NRZI Mark (set RINV/TINV also for NRZI space). 

010 FMO (set RINV/TINV also for FM1). 

011 Reserved. 

100 Manchester. 

101 Reserved. 

110 Differential Manchester (Differential Bi-phase-L). 

111 Reserved. 









































Diagnostic mode. 

00 Normal operation, CTS and CD are under automatic control. Data is received through RXD and 
transmitted through TXD. The SCC uses modem signals to enable or disable transmission and 
reception. These timings are shown in Section 21.4.4, “Controlling SCC Timing with RTS, CTS, 
and CD.” 

01 Local loopback mode. Transmitter output is connected internally to the receiver input, while the 
receiver and the transmitter operate normally. The value on RXD is ignored. If enabled, data 
appears on TXD, or the parallel 1/O registers can be programmed to make TXD high. RTS can also 
be programmed to be disabled in the appropriate parallel !/O register. The transmitter and receiver 
must share the same clock source, but separate CLKx pins can be used if connected to the same 
external clock source. 

If external loopback is preferred, program DIAG for normal operation and externally connect TXD 
and RXD. Then, physically connect the control signals (RTS connected to CD, and CTS grounded) 
or set the parallel 1/O registers so CD and CTS are permanently asserted to the SCC by 
configuring the associated CTS and CD pins as general-purpose I/O. 

10 Automatic echo mode. The transmitter automatically resends received data bit-by-bit using the Rx 
clock provided. The receiver operates normally and receives data if CD is asserted. CTS is 
ignored. 

11 Loopback and echo mode. Loopback and echo operation occur simultaneously. CD and CTS are 
ignored. See the loopback bit description above for clocking requirements. 

For TDM operation, the diagnostic mode is selected by SIMODE[SDMx]; see Section 20.2.4.2, “SI 

Mode Register (SIMODE).” 






















| | 






24-25 
26 






Enable receive. Enables the receiver hardware state machine for this SCC. 

O The receiver is disabled and data in the Rx FIFO is lost. If ENR is cleared during reception, the 
receiver aborts the current character. 

1 The receiver is enabled. 

ENR can be set or cleared, regardless of whether serial clocks are present. Section 21.4.7, 

“Reconfiguring the SCCs,” describes how to disable/enable SCCs. Note that SCCs provide other tools 

for controlling reception—the ENTER HUNT MODE and CLOSE RXBD commands, and RxBDJ[E]. 









Enable transmit. Enables the transmitter hardware state machine for this SCC. 

O The transmitter is disabled. If ENT is cleared during transmission, the current character is aborted 
and TXD returns to the idle state. Data already in the Tx shift register is not sent. 

1 The transmitter is enabled. 

ENT can be set or cleared, regardless of whether serial clocks are present. Section 21.4.7, 

“Reconfiguring the SCCs,” describes how to disable/enable SCCs. Note that SCCs provide other tools 

for controlling transmission besides the ENT bit—the STOP TRANSMIT, GRACEFUL STOP TRANSMIT, and 

RESTART TRANSMIT commands, the freeze option and CTS flow control option in UART mode, and 

TxBDJ[R]. 
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Table 21-2. GSMR_L Field Descriptions (Continued) 


re Pee eT 


28-31 | MODE | Channel protocol mode. See also GSMR_H[TTX, TRX]. 
0000 HDLC 
0001 Reserved 
0010 AppleTalk/LocalTalk 
0011 SS7—reserved for RAM microcode 
0100 UART 


0101 Reserved 

0110 Asynchronous HDLC or IrDA 

0111 V.14—reserved for RAM microcode 
1000 BISYNC 

1001 DDCMP—reserved for RAM microcode 
101x Reserved 

1100 Ethernet 

All others reserved. 





21.2.2 Protocol-Specific Mode Register (PSMR) 


The protocol implemented by an SCC is selected by its GSMR_L[MODE]. Each SCC has 
an additional protocol-specific mode register (PSMR) that configures them specifically for 
the chosen protocol. The PSMR fields are described in the specific chapters that describe 
each protocol. PSMRs are cleared at reset. 


21.2.3 Data Synchronization Register (DSR) 


Each SCC has a data synchronization register (DSR) that specifies the pattern used for 
frame synchronization. The programmed value for DSR depends on the protocol: 


¢ UART—DSR is used to configure fractional stop bit transmission. 
e BISYNC and transparent— DSR should be programmed with the sync pattern. 
e Ethernet—DSR should be programmed with OxDS555. 


e HDLC—At reset, DSR defaults to OxX7E7E (two HDLC flags), so it does not need to 
be written. 


Figure 21-4 shows the sync fields. 


Oa Sy ea ee oe a Cre 
OxA2E (DSR2), OxA4E (DSR3) a 


Figure 21-4. Data Synchronization Register (DSR) 
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21.2.4 Transmit-on-Demand Register (TODR) 


In normal operation, if no frame is being sent by an SCC, the CP periodically polls the R 
bit of the next TxBD to see if a new frame/buffer is requested. Depending on the SCC 
configuration, this polling occurs every 8—32 serial Tx clocks. The transmit-on-demand 
option, selected in the transmit-on-demand register (TODR) shown in Figure 21-5, 
shortens the latency of the Tx buffer/frame and is useful in LAN-type protocols where 
maximum interframe gap times are limited by the protocol specification. 





OxA2C (TODR2), 0xA4C (TODR3) 


Figure 21-5. Transmit-on-Demand Register (TODR) 


The CP can be configured to begin processing a new frame/buffer without waiting the 
normal polling time by setting TODR[TOD] after TxBD[R] is set. Because this feature 
favors the specified TxBD, it may affect servicing of other SCC FIFOs. Therefore, 
transmitting on demand should only be used when a high-priority TxBD has been prepared 
and enough time has passed since the last SCC transmission. Table 21-3 describes TODR 
fields. 


Table 21-3. TODR Field Descriptions 







Description 















a [none 
Transmit on demand. 
0 Normal operation. 

1 The CP gives high priority to the current TxBD and begins sending the frame without waiting the 
normal polling time to check TxBD[R]. TOD is cleared automatically after one serial clock, but 
transmitting on demand continues until an unprepared (R = 0) BD is reached. TOD does not need to 
be set again if new TxBDs are added to the BD table as long as older TxBDs are still being 
processed. New TxBDs are processed in order. The first bit of the frame is typically clocked out 5-6 


TOD 
bit times after TOD is set. 


it5[—— [Reserved, shouldbe cleared 
21.3 SCC Buffer Descriptors (BDs) 


Data associated with each SCC channel is stored in buffers and each buffer is referenced by 
a buffer descriptor (BD) that can reside anywhere in dual-port RAM. The total number of 
8-byte BDs is limited only by the size of the dual-port RAM (128 BDs/1 Kbyte). These BDs 
are shared among all serial controllers—SCCs, SMCs, SPI, and °C. The user defines how 
the BDs are allocated among the controllers. 


SCI URE PSR AMS SOON ISIE BOER RN IRR EEO CON SEE E a 
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Each 64-bit BD has the following structure: 


© The half word at offset + 0x0 contains status and control bits that control and report 
on the data transfer. These bits vary from protocol to protocol. The CP updates the 
status bits after the buffer is sent or received. 


¢ The half word at offset + 0x2 (data length) holds the number of bytes sent or 
received. 


— Foran RxBD, this is the number of bytes the controller writes into the buffer. The 
CP writes the length after received data is placed into the associated buffer and 
the buffer closed. In frame-based protocols, this field contains the total frame 
length, including CRC bytes. Also, if a received frame’s length, including CRC, 
is an exact multiple of MRBLR, the last BD holds no actual data but does contain 
the total frame length. 


— Fora TxBD, this is the number of bytes the controller should send from its buffer. 
Normally, this value should be greater than zero. The CP never modifies this 
field. 


© The word at offset + 0x4 (buffer pointer) points to the beginning of the buffer in — 
memory (internal or external). | 


— For an RxBD, the value must be even. 
— Fora TxBD, this pointer can be even or odd. 


Shown in Figure 21-6, the format of Tx and Rx BDs is the same in each SCC mode. Only 
the status and control bits differ for each protocol. 










Figure 21-6. SCC Buffer Descriptors (BDs) 





For frame-oriented protocols, a message can reside in as many buffers as necessary. Each 
buffer has a maximum length of 65,535 bytes. The CP does not assume that all buffers of a 
single frame are currently linked to the BD table. The CP does assume, however, that the 
unlinked buffers are provided by the core in time to be sent or received; otherwise, an error 
condition is reported—an underrun error when sending and a busy error when receiving. 
Figure 21-7 shows the SCC BD table and buffer structure. 
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Buffer Pointer 











Rx Buffer 








Figure 21-7. SCC Buffer Descriptor and Buffer Structure 


In all protocols, BDs can point to buffers in the internal dual-port RAM. However, because 
internal RAM is used for descriptors, buffers are usually put in external RAM, especially if 
they are large. Usually, the internal U bus transfers data to the buffer. 


The CP processes TxBDs in a straightforward manner. Once the transmit side of an SCC is 
enabled, it starts with the first BD in that SCC TxBD table. Once the CP detects that the R 
bit is set in the TxBD, it starts processing the buffer. The CP detects that the BD is ready 
when it polls the R bit or when the user writes to the TODR. After data from the BD is put 
in the Tx FIFO, if necessary the CP waits for the next descriptor’s R bit to be set before 
proceeding. Thus, the CP does no look-ahead descriptor processing and does not skip BDs 
that are not ready. When the CP sees a BD’s W bit (wrap) set, it returns to the start of the 
BD table after this last BD of the table is processed. The CP clears R (not ready) after using 
a TxBD, which keeps it from being retransmitted before it is confirmed by the core. 
However, some protocols support a continuous mode (CM), for which R is not cleared 
(always ready). 


The CP uses RxBDs similarly. When data arrives, the CP performs required processing on 
the data and moves resultant data to the buffer pointed to by the first BD; it continues until 
the buffer is full or an event, such as an error or end-of-frame detection, occurs. The buffer 
is then closed; subsequent data uses the next BD. If E = 0, the current buffer is not empty 
and it reports a busy error. The CP does not move from the current BD until E 1s set by the 





MOTOROLA Chapter 21. Serial Communications Controllers 21-13 


Part V. The Communications Processor Module 


core (the buffer is empty). After using a descriptor, the CP clears E (not empty) and does 
not reuse a BD until it has been processed by the core. However, in continuous mode (CM), 
E remains set. When the CP discovers a descriptor’s W bit set (indicating it is the last BD 
in the circular BD table), it returns to the beginning of the table when it is time to move to 
the next buffer. | 


21.4 SCC Parameter RAM 


Each SCC parameter RAM area begins at the same offset from each SCC base area. The 
protocol-specific portions of the SCC parameter RAM are discussed in the specific protocol 
descriptions and the part that is common to all SCC protocols is shown in Table 21-4. 


Some parameter RAM values must be initialized before the SCC can be enabled. Other 
values are initialized or written by the CP. Once initialized, most parameter RAM values do 
not need to be accessed because most activity centers around the descriptors rather than the 
parameter RAM. However, if the parameter RAM is accessed, note the following: 


e Parameter RAM can be read at any time. 


© Tx parameter RAM can be written only when the transmitter is disabled—after a 
STOP TRANSMIT command and before a RESTART TRANSMIT command or after the 
buffer/frame finishes transmitting after a GRACEFUL STOP TRANSMIT command and 
before a RESTART TRANSMIT command. | | 


e Rx parameter RAM can be written only when the receiver is disabled. Note the 
CLOSE RX BD command does not stop reception, but it does allow the user to extract 
data from a partially full Rx buffer. ee 


e See Section 21.4.7, “Reconfiguring the SCCs.” 
Table 21-4 shows the parameter RAM map for all SCC protocols. Boldfaced entries must 
be initialized by the user. | 


Table 21-4. SCC Parameter RAM Map for All Protocols 


Ee 


RBASE | Hword | Rx/TxBD table base address—offset from the beginning of dual-port RAM. The BD 
tables can be placed in any unused portion of the dual-port RAM. The CP starts BD 
0x02 | TBASE | Hword | processing at the top of the table. (The user defines the end of the BD table by setting 
the W bit in the last BD to be processed.) Initialize these entries before enabling the 
RFCR Rx function code. See Section 21 .4.1, “Function Code Registers (RFCR and TFCR).” 
TFCR Tx function code. See Section 21.4.1, “Function Code Registers (RFCR and TFCR).” 


















corresponding channel. Erratic operations occur if BD tables of active SCCs overlap. 
Values in RBASE and TBASE should be multiples of eight. 
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Table 21-4. SCC Parameter RAM Map for All Protocols (Continued) 


0x06 MRBLR | Hword | Maximum receive buffer length. Defines the maximum number of bytes the MPC850 
writes to a receive buffer before it goes to the next buffer. The MPC850 can write fewer 
bytes than MRBLR if a condition such as an error or end-of-frame occurs. It never writes 
more bytes than the MRBLR value. Therefore, user-supplied buffers should be no 
smaller than MRBLR. MRBLR should be greater than zero for all modes. It should be a 
multiple of 4 for Ethernet and HDLC modes, and in totally transparent mode unless the 
Rx FIFO is 8-bits wide (GSMR_H[RFW] = 1). 
Note that although MRBLR is not intended to be changed while the SCC is operating, it 
can be changed dynamically in a single-cycle, 16-bit move (not two 8-bit cycles). 

Changing MRBLR has no immediate effect. To guarantee the exact Rx BD on which the 
change occurs, change MRBLR only while the receiver is disabled. 
Transmit buffer length is programmed in TxBD[Data Length] and is not affected by 
MRBLR. 


Word | Rx internal buffer pointer*. The Rx and Tx internal buffer pointers are updated by the 
SDMA channels to show the next address in the buffer to be accessed. 


0x10 RBPTR_ {| Hword | Current RxBD pointer. Points to the current BD being processed or to the next BD the 
receiver uses when it is idling. After reset or when the end of the BD table is reached, 
the CP initializes RBPTR to the value in the RBASE. Although most applications do not 
need to write RBPTR, it can be modified when the receiver is disabled or when no Rx 
buffer is in use. 


Hword | Rx internal byte count?. The Rx internal byte count is a down-count value initialized with 
| MRBLR and decremented with each byte written by the supporting SDMA channel. 
Oo 


Word | Tx internal buffer pointer®. The Rx and Tx internal buffer pointers are updated by the 
SDMA channels to show the next address in the buffer to be accessed. 


0x20 TBPTR_ | Hword | Current TxBD pointer. Points to the current BD being processed or to the next BD the 
transmitter uses when it is idling. After reset or when the end of the BD table is reached, 
the CP initializes TBPTR to the value in the TBASE. Aithough most applications do not 
need to write TBPTR, it can be modified when the transmitter is disabled or when no Tx 
buffer is in use (after a STOP TRANSMIT Or GRACEFUL STOP TRANSMIT command is issued 
and the frame completes its transmission). 


Sea treaea 
decremented with each byte read by the supporting SDMA channel. 
Pes fem 
[| [rte arn Te sin tis vn dpe onthe posi cee) 
) 


1 From SCC base. SCC base = IMMR + 0x3D00 (SCC2) or 0x3E00 (SCC3 
2 These parameters need not be accessed for normal operation but may be helpful for debugging. 
3 For CP use only 
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21.4.1 Function Code Registers (RFCR and TFCR) 


Each SCC has two separate function code registers—one for Rx buffers (RFCRx) and one 
for Tx buffers (TFCRx). Function code registers contain the value to appear on AT[1-3] 
when the associated SDMA channel accesses memory. It also selects the byte-ordering 
convention. Figure 21-8 shows the register format. 


0000_0000_0000_0000 


R/w 
SCCx base + 0x04 (RFCRx); SCCx base + 0x05 (TFCRx) 
Figure 21-8. Function Code Registers (RFCR and TFCR) 





Table 21-5 describes RFCRx/TFCRx fields. 
3-4 















Byte ordering. Set BO to select the required byte ordering for the buffer. lf BO is changed on-the-fly, 
it takes effect at the beginning of the next frame (Ethernet, HDLC, and transparent) or at the 
beginning of the next BD. See Appendix A, “Byte Ordering.” | 

00 Reserved 

01 PowerPC little-endian. 

1x Big-endian or true little-endian. 








_ Table 21-5. RFCRx /TFCRx Field Descriptions 


Reserved, should be cleared. 
5-7 |AT[1-3] Address type. Contains the function code value used during the SDMA channel memory access. 
Note AT[O] is driven high to identify this SDMA channel access as a DMA type. 





21.4.2 Handling SCC Interrupts 


SCC interrupts are handled globally by the CPM interrupt controller (CPIC) using the CPM 
interrupt pending register (CIPR), CPM interrupt mask register (CIMR), and CPM 
in-service register (CISR), described in Chapter 35, “CPM Interrupt Controller.” Bits in 
each CPIC register are used to mask, enable, or report individual interrupts in an SCC 
channel. Interrupt priority among SCCs is determined in the CPM interrupt configuration 
register (CICR). | | 


To allow interrupt handling for SCC-specific events, further event, mask, and status. 
registers are provided within each SCC’s internal memory map area; see Table 21-6. Since 
interrupt events are protocol-dependent, event descriptions are found in the specific 
protocol chapters. - 
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Table 21-6. SCCx Event, Mask, and Status Registers 


neUIsteh Description 
IMMR Offset P 


SCCEx SCC event register This 16-bit register reports events recognized by any of the SCCs. When an event 

0xA30 (SCC2) | is recognized, the SCC sets its corresponding bit in SCCE, regardless of the corresponding mask bit. 

0xA50 (SCC3) | When the corresponding event occurs, an interrupt is signaled to the CPIC. Bits are cleared by writing 
ones (writing zeros has no effect). SCCE is cleared at reset and can be read at any time. 


SCCMx SCC mask register. The 16-bit, read/write register allows interrupts to be enabled or disabled using 


| OxA34 (SCC2) | the CPM for specific events in each SCC channel. An interrupt is generated only if SCC interrupts in 

0xA54 (SCC3) | this channel are enabled in the CPIC. If an SCCM bit is zero, the CPM does not proceed with interrupt 
handling when that event occurs. If an SCCM bit is set, a 1 in the corresponding SCCE bit sets the 
SCCx event bit in CIPR. The SCCM and SCCE bit positions are identical. 


SCCSx SCC status register. This 8-bit, read-only register allows monitoring of the real-time status of RXD. It 
0xA37 (SCC2) | does not show the real-time status of CTS and CD, which is available in the parallel I/O data registers. 
0xA57 (SCC3) | Interrupts caused by CTS and CD are described in Section 34.4, “Port C.” 





Follow these steps to handle an SCC interrupt: 


1. Once an interrupt occurs, read SCCE to determine the interrupt sources and clear 
those SCCE bits (in most cases). 


2. Process the TxBDs to reuse them if SCCE[TX] or SCCE[TXE] = 1. If the transmit 
speed is fast or the interrupt delay is long, the SCC may have sent more than one Tx 
buffer. Thus, it is important to check more than one TxBD during interrupt handling. 


A common practice is to process all TxBDs in the handler until one is found with its 
R bit set. 


3. Extract data from the RxBD if SCCE[RX], SCCE[RXB], or SCCE[RXF] is set. As 
with transmit buffers, if the receive speed is fast or the interrupt delay is long, the 
SCC may have received more than one buffer and the handler should check more 
than one RxBD. A common practice is to process all RxBDs in the interrupt handler 
until one is found with its E bit set. 


Clear CISR[SCCx]. 


5. Execute the rfii instruction. 


21.4.3 Initializing the SCCs 


The SCCs require that a number of registers and parameters be configured after a power-on 
reset. Regardless of the protocol used, follow these steps to initialize SCCs: 


1. Write the parallel I/O ports to configure and connect the I/O pins to the SCCs. 


2. Set the SDMA configuration register SDCR[RAID] field to ObO1 (U-bus arbitration 
priority level 5). 


3. Configure the parallel I/O registers to enable RTS, CTS, and CD if these signals are 
required. 
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4. If the time-slot assigner (TSA) is used, the serial interface (SI) must be configured. 
If the SCC is used in NMSI mode, SICR must still be initialized. 


Write all GSMR bits except ENT or ENR. 

Write the PSMR. 

Write the DSR. 

Initialize the required values for this SCC’s parameter RAM. 


a ae eee 


Clear out any current events in SCCE (optional). 

10. Write ones to SCCM register to enable interrupts. 

11. Write CICR to configure the SCC interrupt priority. 
12.Clear out any current interrupts in the CIPR (optional). 
13. Write the CIMR to enable interrupts to the CPIC. 
14.Set GSMR_L[ENT] and GSMR_L[ENR]. 


Descriptors can have their R or E bits set at any time. Notice that the CPCR does not need 
to be accessed after a hard reset. An SCC should be disabled and reenabled after any 
dynamic change to its parallel I/O ports or serial channel physical interface configuration. 
A full reset can also be implemented using CPCR[RST]. 


21.4.4 Controlling SCC Timing with RTS, CTS, and CD 


When GSMR_L[DIAG] is programmed to normal operation, CD and CTS are controlled 
by the SCC. In the following subsections, it is assumed that GSMR_L[TCI] is zero, 
implying normal transmit clock operation. 


21.4.4.1 Synchronous Protocols 


RTS is asserted when the SCC data is loaded into the Tx FIFO and a falling Tx clock occurs. 
At this point, the SCC starts sending data once appropriate conditions occur on CTS. In all 
cases, the first data bit is the start of the opening flag, sync pattern, or preamble. 





Figure 21-9 shows that the delay between RTS and data is 0 bit times, regardless of 
GSMR_H[CTSS]. This operation assumes that CTS is already asserted to the SCC or that 
CTS is reprogrammed to be a parallel I/O line, in which case CTS to the SCC is always 
asserted. RTS is negated one clock after the last bit in the frame. 


S PORERRR EAR 
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TXD 
(Output) 


RTS First Bit of Frame Data Last Bit of Frame Data 
(Output) iil a a ae 


CTS | | 
(Input) 








NOTE: 
1. A frame includes opening and closing flags and syncs, if present in the protocol. 


Figure 21-9. Output Delay from RTS Asserted for Synchronous Protocols 


When RTS is asserted, if CTS is not already asserted, delays to the first data bit depend on 
when CTS is asserted. Figure 21-10 shows that the delay between CTS and the data can be 
approximately 0.5 to 1 bit times or 0 bit times, depending on GSMR_H[CTSS]. 


TXD = 
(Output) 1 
I 

| 


RTS oe First Bit of Frame Data Last Bit of Frame Data 
(Output) OT 


CTS 
(Input) 









| ee 
i| ~t——— CTS Sampled Low Here | 


NOTE: 
1. GSMR_H[CTSS] = 0. CTSP is a don’t care. 


TXD 
(Output) 


| 
RTS Whe First Bit of Frame Data Last Bit of Frame Data 
(Output) We 


CTS | 
(Input) 





NOTE: 
1. GSMR_H[CTSS] = 1. CTSP is a don’t care. 


Figure 21-10. Output Delay from CTS Asserted for Synchronous Protocols 


If CTS is programmed to envelope data, negating it during frame transmission causes a 
CTS lost error. Negating CTS forces RTS high and Tx data to become idle. If 
GSMR_HI[CTSS] is zero, the SCC must sample CTS before a CTS lost is recognized; 
otherwise, the negation of CTS immediately causes the CTS lost condition. See 
Figure 21-11. 
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TCLK 





TXD 
(Output) 





Data Forced High 





7 
| & 
| | 
RTS | on First Bit of Frame Data ——— 
(Output) ) RTS Forced High 


I | | 






— | _ a 
Pe \| ~¢—— CTS Sampled Low Here CTS Sampled High Here | 
NOTE: CTS Lost Signaled in Frame BD 
1. GSMR_H[CTSS] = 0. CTSP=0 or no CTS lost can occur. 
TCLK 
| | 

TXD 
(Output) 


| | : 
RTS Pee First Bit of Frame Data 3 
(Output) \| RTS Forced High 


T 
| | 
CTS | ! 
(Input) 
NOTE: CTS Lost Signaled in Frame BD 
1. GSMR_H[CTSS] = 1. CTSP=0 or no CTS lost can occur. 
, Figure 21-11. CTS Lost in Synchronous Protocols 


Note that if GSMR_H[CTSS] = 1, CTS transitions must occur while the Tx clock is low. 


Reception delays are determined by CD as shown in Figure 21-12. If GSMR_H[CDS] is 
zero, CD is sampled on the rising Rx clock edge before data is received. If GSMR_H[CDS] 
is 1, CD transitions cause data to be immediately gated into the receiver. 





21-20 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part V. The Communications Processor Module 


RXD 


(Input) - 
| 
CD | First Bit of Frame Data Last Bit of Frame Data ae a 
(Input) | ee ) 


| 
'«— CD Sampled Low Here CD Sampled High Here ——>" 


NOTE: 
1. GSMR_H[CDS] = 0. CDP=0. 
2. lf CD is negated prior to the last bit of the receive frame, CD lost is signaled in the frame BD. 
3. If CDP=1, CD lost cannot occur and CD negation has no effect on reception. 
















| 
RXD q 
(Input) 

| | 

CD First Bit of Frame Data Last Bit of Frame Data 
(Input) | | 
, CD Assertion Immediately CD Negation Immediately | 

Gates Reception Halts Reception 


NOTE: 
1. GSMR_H[CDS] = 1. CDP=0. sss 
2. If CD is negated prior to the last bit of the receive frame, CD lost is signaled in the frame BD. 
3. If CDP=1, CD lost cannot occur and CD negation has no effect on reception. 


Figure 21-12. Using CD to Control Synchronous Protocol Reception 


If CD is programmed to envelope the data, it must remain asserted during frame 
transmission or a CD lost error occurs. Negation of CD terminates reception. If 
GSMR_H[CDS] is zero, CD must be sampled by the SCC before a CD lost error is 
recognized; otherwise, the negation of CD immediately causes the CD lost condition. 


If GSMR_H[CDS}] is set, all CD transitions must occur while the Rx clock is low. 


21.4.4.2 Asynchronous Protocols 

In asynchronous protocols, RTS is asserted when SCC data is loaded into the Tx FIFO and 
a falling Tx clock occurs. CD and CTS can be used to control reception and transmission 
in the same manner as the synchronous protocols. The first bit sent in an asynchronous 
protocol is the start bit of the first character. In addition, the UART protocol has an option 
for CTS flow control as described in Chapter 22, “SCC UART Mode.” 


e If CTS is already asserted when RTS is asserted, transmission begins in two 
additional bit times. 


e If CTS is not already asserted when RTS is asserted and GSMR_H[CTSS] = 0, 
transmission begins in three additional bit times. 


e If CTS is not already asserted when RTS is asserted and GSMR_H[CTSS] = 1, 
transmission begins in two additional bit times. 
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21.4.5 Digital Phase-Locked Loop (DPLL) Operation 


Each SCC channel includes. a digital phase-locked loop (DPLL) for recovering clock 
information from a received data stream. For applications that provide a direct clock source 
to the SCC, the DPLL can be bypassed by selecting 1x mode for GSMR_L[RDCR, TDCR]. 
If the DPLL is bypassed, only NRZ or NRZI encodings are available. The DPLL must not 
be used when an SCC is programmed to Ethernet and is optional for other protocols. 
Figure 21-13 shows the DPLL receiver block; Figure 21-14 shows the transmitter block 
diagram. 
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Figure 21-13. DPLL Receiver Block Diagram 
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Figure 21-14. DPLL Transmitter Block Diagram 


The DPLL can be driven by one of the baud rate generator outputs or an external clock, 
CLKx. In the block diagrams, this clock is labeled HSRCLK/HSTCLK. The 
HSRCLK/HSTCLK should be approximately 8x, 16x, or 32x the data rate, depending on 
the coding chosen. The DPLL uses this clock, along with the data stream, to construct a data 
clock that can be used as the SCC Rx and/or Tx clock. In all modes, the DPLL uses the input 
clock to determine the nominal bit time. If the DPLL is bypassed, HSRCLK/HSTCLK is 
used directly as RCLK/TCLK. 


At the beginning of operation, the DPLL is in search mode, whereas the first transition 
resets the internal DPLL counter and begins DPLL operation. While the counter is 
counting, the DPLL watches the incoming data stream for transitions; when one is detected, 
the DPLL adjusts the count to produce an output clock that tracks incoming bits. 


The DPLL has a carrier-sense signal that indicates when data transfers are on RXD. The 
carrier-sense signal asserts as soon as a transition is detected on RXD; it negates after the 
programmed number of clocks in GSMR_L[TSNC] when no transitions are detected. 


To prevent itself from locking on the wrong edges and to provide fast synchronization, the 
DPLL should receive a preamble pattern before it receives the data. In some protocols, the 
preceding flags or syncs can function as a preamble; others use the patterns in Table 21-7. 
When transmission occurs, the SCC can generate preamble patterns, as programmed in 
GSMR_L[TPP, TPL]. 
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Table 21-7. Preamble Requirements 


The DPLL can also be used to invert the data stream of a transfer. This feature is available 
in all encodings, including standard NRZ format. Also, when the transmitter is idling, the 
DPLL can either force TXD high or continue encoding the data supplied to it. 


















The DPLL is used for UART encoding/decoding, which gives the option of selecting the 
divide ratio in the UART decoding process (8x, 16x, or 32x). Typically, 16x is used. 


The maximum data rate supported with the DPLL is 3.125 MHz, assuming a 25-MHz 
system clock and the 8x ratio (25 MHz/8 = 3.125 MHz). Thus, the frequency applied to 
CLKx or generated by an internal baud rate generator may be up to 25 MHz on a 25-MHz 
MPC850, if the DPLL 8x, 16x, or 32x option is used. 


Note the 1:2 system clock/serial clock ratio does not apply when the DPLL is used to 
recover the clock in the 8x, 16x, or 32x modes. Synchronization occurs internally after the 
DPLL generates the Rx clock. Therefore, even the fastest DPLL clock generation (the 8x 
option) easily meets the required 1:2 ratio clocking limit. 


21.4.5.1 Encoding Data with a DPLL 


Each SCC contains a DPLL unit that can be programmed to encode and decode the SCC 
data as NRZ, NRZI Mark, NRZI Space, FM0O, FM1, Manchester, and Differential 
Manchester. Figure 21-15 shows the different encoding methods. 
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Figure 21-15. DPLL Encoding Examples 


If the DPLL is not needed, NRZ or NRZI codings can be selected in GSMR_L[RENC, 
TENC]. Coding definitions are shown in Table 21-8. 


Table 21-8. DPLL Codings 


Description 


INRZ | A one is represented by a high level for the duration of the bit and a zero is represented by a low level. 


| NRZI Mark |A one is represented by no transition at all. A zero is represented by a transition at the beginning of the 
bit (the level present in the preceding bit is reversed). 


RZI Space | A one is represented by a transition at the beginning of the bit (the level present in the preceding bit is 
reversed). A zero is represented by no transition at all. 


FMO A one is represented by a transition only at the beginning of the bit. A zero is represented by a transition 
at the beginning of the bit and another transition at the center of the bit. 

FM1 A one is represented by a transition at the beginning of the bit and another transition at the center of the 
bit. A zero is represented by a transition only at the beginning of the bit. 


N 

Manchester | A one is represented by a high-to-low transition at the center of the bit. A zero is represented by a low to 

high transition at the center of the bit. In both cases there may be a transition at the beginning of the bit 
to set up the level required to make the correct center transition. 


Differential | A one is represented by a transition at the center of the bit with the opposite direction from the transition 
Manchester | at the center of the preceding bit. A zero is represented by a transition at the center of the bit with the 
same polarity from the transition at the center of the preceding bit. 





21.4.6 Clock Glitch Detection 


Clock glitches cause problems for many communications systems, and they may go 
undetected by the system. Systems that supply an external clock to a serial channel are often 
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susceptible to glitches from noise, connecting or disconnecting the physical cable from the 
application board, or excessive ringing on a clock line. A clock glitch occurs when more 
than one edge occurs in a time period that violates ine? minimum high or low time 
specification of the input clock. 


The SCCs on the MPC850 have a special circuit designed to detect glitches and alert the 
system of a problem at the physical layer. The glitch-detect circuit is not a specification test; 
if a circuit does not meet the SCC’s input clocking specifications, erroneous data may not 
be detected or false glitch indications can occur. Regardless of whether the DPLL is used, 
the received clock is passed through a noise filter that eliminates any noise spikes that affect 
a single sample. This sampling is enabled using GSMR_H[GDE]. 


If a spike is detected, a maskable Rx or Tx glitched clock interrupt is generated in 
SCCEx[GLR ,GLT]. Although the receiver or transmitter can be reset or allowed to continue 
operation, statistics on clock glitches should be kept for evaluation to help in debugging, 
especially during prototype testing. 


21.4.7 Reconfiguring the SCCs 


The proper reconfiguration sequence must be followed for SCC parameters that cannot be 
changed dynamically. For instance, the internal baud rate generators allow on-the-fly | 
changes, but the DPLL-related GSMR does not. The steps in the following sections show 
how to disable, reconfigure and re-enable an SCC to ensure that buffers currently in use are 
properly closed before reconfiguring the SCC and that subsequent data goes to or from new 
buffers according to the new configuration. 


Modifying parameter RAM does not require the SCC to be fully disabled. See the 
parameter RAM description for when values can be changed. To disable all SCCs, SMCs, 
SPI, and the I?C, set CPCR[RST] to reset the entire CPM. 


21.4.7.1 General Reconfiguration Sequence for an SCC Transmitter 
An SCC transmitter can be reconfigured by following these general steps: 


1. If the SCC is sending data, issue a STOP TRANSMIT command. Transmission should 
stop smoothly. If the SCC is not transmitting (no TxBDs are ready or the GRACEFUL 
STOP TRANSMIT command has been issued and completed) or the INIT Tx 
PARAMETERS command is issued, the STOP TRANSMIT command is not required. 


2. Clear GSMR_L[ENT] to disable the SCC transmitter and put it in reset state. 


3. Modify SCC Tx parameters or parameter RAM. To switch protocols or restore the 
initial Tx parameters, issue an INIT TX PARAMETERS command. 


4. If an INIT TX PARAMETERS command was not issued in step 3, issue a RESTART 
TRANSMIT command. 


5. Set GSMR_L[ENT]. Transmission begins using the TxBD pointed to by TBPIR, 
assuming the R bit is set. 
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21.4.7.2 Reset Sequence for an SCC Transmitter 
The following steps reinitialize an SCC transmit parameters to the reset state: 


1. Clear GSMR_L[ENT]. 
2. Make any modifications then issue the INIT TX PARAMETERS command. 
3. Set GSMR_L[ENT]. 


21.4.7.3 General Reconfiguration Sequence for an SCC Receiver 
An SCC receiver can be reconfigured by following these steps: 


1. Clear GSMR_L[ENR]. The SCC receiver is now disabled and put in a reset state. 


2. Modify SCC Rx parameters or parameter RAM. To switch protocols or restore Rx 
parameters to their initial state, issue an INIT RX PARAMETERS command. 


3. Ifthe INITRX PARAMETERS command was not issued in step 2, issue an ENTER HUNT 
MODE command. 


4. Set GSMR_L[ENR]. Reception begins using the RxBD pointed to by RBPTR, 
assuming the E bit is set. 


21.4.7.4 Reset Sequence for an SCC Receiver 
To reinitialize the SCC receiver to the state it was in after reset, follow these steps: 


1. Clear GSMR_L[ENR]. 
2. Make any modifications then issue the INIT RX PARAMETERS command. 
3. Set GSMR_L[ENR]. 


21.4.7.5 Switching Protocols 
To switch an SCC’s protocol without resetting the board or affecting other SCCs, follow 
these steps: 

1. Clear GSMR_L[ENT, ENR]. 


2. Make protocol changes in the GSMR and additional parameters then issue the INIT 
TX and RX PARAMETERS command to initialize both Tx and Rx parameters. 


3. Set GSMR_L[ENT, ENR] to enable the SCC with the new protocol. 


21.4.8 Saving Power 
To save power when not in use, an SCC can be disabled by clearing GSMR_L[ENT, ENR]. 
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Chapter 22 
SCC UART Mode 


The universal asynchronous receiver transmitter (UART) protocol is commonly used to 
send low-speed data between devices. The term asynchronous is used because it is not 
necessary to send clocking information along with the data being sent. UART links are 
typically 38400 baud or less and are character-based. Asynchronous links are used to 
connect terminals with other devices. Even where synchronous communications are 
required, the UART 1s often used as a local port to run board debugger software. The 
character format of the UART protocol is shown in Figure 22-1. 


UART TCLK 
8x, 16x, or 32x 



















UART TXD é ie oe eS 
| Start 5, 6, 7, or 8 Data Bits with the Addr | Parity | 9/16 to2 
Bit Least Significant Bit First Bit Bit Stop Bits 

NOTE: (Optional) 


1. Clock is not to scale. 


Figure 22-1. UART Character Format 


Because the transmitter and receiver operate asynchronously, there is no need to connect 
the transmit and receive clocks. Instead, the receiver oversamples the incoming data stream 
(usually by a factor of 16) and uses some of these samples to determine the bit value. 
Traditionally, the middle 3 of the 16 samples are used. Two UARTs can communicate using 
this system if the transmitter and receiver use the same parameters, such as the parity 
scheme and character length. 


When data is not sent, a continuous stream of ones is sent (idle condition). Because the start 
bit is always a zero, the receiver can detect when real data is once again on the line. VART 
specifies an all-zeros break character, which ends a character transfer sequence. 


The most popular protocol that uses asynchronous characters is the RS-232 standard, which 
specifies baud rates, handshaking protocols, and mechanical/electrical details. Another 
popular format is RS-485, which defines a balanced line system allowing longer cables than 
RS-232 links. Even synchronous protocols like HDLC are sometimes defined to run over 
asynchronous links. The Profibus standard extends UART protocol to include 
LAN-oriented features such as token passing. 
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All standards provide handshaking signals, but some systems require only three physical 
lines —Tx data, Rx data, and ground. Many proprietary standards have been built around 
the UART’s asynchronous character frame, some of which implement a multidrop 
configuration where multiple stations, each with a specific address, can be present on a 
network. In multidrop mode, frames of characters are broadcast with the first character 
acting as a destination address. To accommodate this, the UART frame is extended one bit 
to distinguish address characters from normal data characters. 


In synchronous UART (isochronous operation), a separate clock signal is explicitly 
provided with the data. Start and stop bits are present in synchronous UART, but 
oversampling is not required because the clock is provided with each bit. 


The general SCC mode register (GSMR) is used to configure an SCC channel to function 
in UART mode, which provides standard serial I/O using asynchronous character-based 
(start-stop) protocols with RS-232C-type lines. Using standard asynchronous bit rates and 
protocols, an SCC UART controller can communicate with any existing RS-232-type 
device and provides a serial communications port to other microprocessors and terminals 
(either locally or via modems). The independent transmit and receive sections, whose 
operations are asynchronous with the core, send data from memory (either internal or 
external) to TXD and receive data from RXD. The UART controller supports a multidrop 
mode for master/slave operations with wake-up capability on both the idle signal and 
address bit. It also supports synchronous operation where a clock (internal or external) must 
be provided with each bit received. 


22.1 Features 
The following list summarizes main features of an SCC UART controller: 


¢ Flexible message-based data structure 

¢ Implements synchronous and asynchronous UART 
¢ Multidrop operation 

e Receiver wake-up on idle line or address bit 


e Receive entire messages into buffers as indicated by receiver idle timeout or by 
control character reception 


e Eight control character comparison 

e Two address comparison in multidrop configurations 

e Maintenance of four 16-bit error counters 

e Received break character length indication 

e Programmable data length (5—8 bits) 

¢ Programmable fractional stop bit lengths (from 9/16 to 2 bits) in transmission 
¢ Capable of reception without a stop bit 

e Even/odd/force/no parity generation and check 
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e Frame error, noise error, break, and idle detection 
e Transmit preamble and break sequences 
e Freeze transmission option with low-latency stop 


22.2 Normal Asynchronous Mode 


In normal asynchronous mode, the receive shift register receives incoming data on RXDx. 
Control bits in the VART mode register (PSMR) define the length and format of the VART 
character. Bits are received in the following order: 
1. Start bit 
5-8 data bits (Isb first) 
Address/data bit (optional) 
Parity bit (optional) 
Stop bits 


aA Rw 


The receiver uses a clock 8x, 16x, or 32x faster than the baud rate and samples each bit of 
the incoming data three times around its center. The value of the bit is determined by the 
majority of those samples; if all do not agree, the noise indication counter (NOSEC) in 
parameter RAM is incremented. When a complete character has been clocked in, the 
contents of the receive shift register are transferred to the receive FIFO before proceeding 
to the receive buffer. The CPM flags UART events, including reception errors, in SCCE and 
the RxBD status and control fields. 


The SCC can receive fractional stop bits. The next character’s start bit can begin any time 
after the three middle samples are taken. The UART transmit shift register sends outgoing 
data on TXDx. Data is then clocked synchronously with the transmit clock, which may have 
either an internal or external source. Characters are sent Isb first. Only the data portion of 
the UART frame is stored in the buffers because start and stop bits are generated and 
stripped by the SCC. A parity bit can be generated in transmission and checked during 
reception; although it is not stored in the buffer, its value can be inferred from the buffer’s 
reporting mechanism. Similarly, the optional address bit is not stored in the transmit or 
receive buffer, but is supplied in the BD itself. Parity generation and checking includes the — 
optional address bit. GSMR_H[RFW] must be set for an 8-bit receive FIFO in the UART 
receiver. 


22.3 Synchronous Mode 


In synchronous mode, the controller uses a 1x data clock for timing. The receive shift 
register receives incoming data on RXDx synchronous with the clock. The bit length and 
format of the serial character are defined by the control bits in the PSMR in the same way 
as in asynchronous mode. When a complete byte has been clocked in, the contents of the 
receive shift register are transferred to the receive FIFO before proceeding to the receive 
buffer. The CPM flags UART events, including reception errors, in SCCE and the RxBD 
status and control fields. GSMR_H[RFW] must be set for an 8-bit receive FIFO. 
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The synchronous UART transmit shift register sends outgoing data on TXDx. Data is then 
clocked synchronously with the transmit clock, which can have an internal or external 
source. 


22.4 SCC UART Parameter RAM 


For UART mode, the protocol-specific area of the SCC parameter RAM is mapped as in 
Table 22-1. 


Table 22-1. UART-Specific SCC Parameter RAM Memory Map 


wan 


MAX_IDL Maximum idie characters. When a character is received, the receiver begins 


counting idle characters. If MAX_IDL idle characters are received before the 
next data character, an idle timeout occurs and the buffer is closed, generating 
7 
— 


a maskable interrupt request to the core to receive the data from the buffer. 

Thus, MAX_IDL offers a way to demarcate frames. To disable the feature, clear 

MAX_IDL. The bit length of an idle character is calculated as follows: 1 + data 

length (5-9) + 1 (if parity is used) + number of stop bits (1-2). For 8 data bits, 
no parity, and 1 stop bit, the character length is 10 bits. 

0x46 BRKLN Hword 









0x38 













Ox3A Temporary idle counter. Holds the current idle count for the idle timeout 
process. IDLC is a down-counter and does not need to be initialized or 


accessed. 





Ox3C Break count register (transmit). Determines the number of break characters the 
transmitter sends. The transmitter sends a break character sequence when a 
STOP TRANSMIT Command is issued. For 8 data bits, no parity, 1 stop bit, and 


1 start bit, each break character consists of 10 zero bits. 


















Ox3E User-initialized, 16-bit (modulo—2 *) counters incremented by the CP. 
PAREC counts received parity errors. 

FRMEC counts received characters with framing errors. 

NOSEC counts received characters with noise errors. | 
BRKEC counts break conditions on the signal. A break condition can last for 


hundreds of bit times, yet BRKEC is incremented only once during that period. 


0x40 
0x42 


g g 
> ® 
& io) 






Last received break length. Holds the length of the last received break 
character sequence measured in bits but is only accurate to within one 
character unit. For example, if RXDx is low for 20 bit times and the defined 
character length is 8 bits, BRKLN = 0x0010, indicating that the break sequence 
is at least 2 characters long. (BRKLN will register 0x0018 once 24 bits of break 
arrive.) For 8 data bits, no parity, 1 stop bit, and 1 start bit, BRKLN is accurate 
to within 10 bits. 




















0x48 UADDR1 UART address character 1/2. In multidrop mode, the receiver provides 
automatic address recognition for two addresses. In this case, program the 


UADDR2 lower order bytes of UADDR1 and UADDR2 with the two preferred addresses. 


RTEMP Temporary storage 


TOSEQ Hword | Transmit out-of-sequence character. Inserts out-of-sequence characters, such 
as XOFF and XON, into the transmit stream. The TOSEQ character is put in 
the Tx FIFO without affecting a Tx buffer in progress. See Section 22.11, 

“Inserting Control Characters into the Transmit Data Stream.” 


Ox4A 
Ox4C | 
Ox4E 
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Table 22-1. UART-Specific SCC Parameter RAM Memory Map (Continued) 


Joxs0. | CHARACTER |Hword — Control character 1-8. These characters define the Rx control characters on 
which interrupts can be generated. 

os enanacrene |rnor 

ase [OwaRAcTeRa |rnoo 


Hword | Receive control character mask. Used to mask comparison of 
CHARACTER1-8 so classes of control characters can be defined. A one 
enables the comparison, and a zero masks it. 
0x62 RCCR Hword | Receive control character register. Used to hold the last rejected control 
| character (not written to the Rx buffer). Generates a maskable interrupt. If the 
core does not process the interrupt and read RCCR before a new control 
character arrives, the previous control character is overwritten. 


0x64 RLBC Hword | Receive last break character. Used in synchronous UART when PSMR[RZS] = 
1; holds the last break character pattern. By counting zeros in RLBC, the core | 
can measure break length to a one-bit resolution. Read RLBC by counting the 
zeros written from bit 0 to where the first one was written. RLBC = 
06001 xxxxxxxxxxxxx indicates two zeros; 0b1XxXXXxXXXXXXXXXXxX indicates no 
zeros. 
Note that RLBC can be used in combination with BRKLN above to measure the 

7 break length down to a bit resolution: (BRKLN + number of zeros in RLBC). 


' From SCC base. SCC base = IMMR + 0x3D00 (SCC2) or 0x3E00 (SCC3) 





22.5 Data-Handling Methods: Character- or 
Message-Based 


An SCC UART controller uses the same BD table and buffer structures as the other 
protocols and supports both multibuffer, message-based and single-buffer, character-based 
operation. 


For character-based transfers, each character is sent with stop bits and parity and received 
into separate 1-byte buffers. A maskable interrupt is generated when each buffer is received. 


In a message-based environment, transfers can be made on entire messages rather than on 
individual characters. To simplify programming and save processor overhead, a message is 
transferred as a linked list of buffers without core intervention. For example, before 
handling input data, a terminal driver may wait for an end-of-line character or an idle 
timeout rather than be interrupted when each character is received. Conversely, ASCII files 
can be sent as messages ending with an end-of-line character. 


When receiving messages, up to eight control characters can be configured to mark the end 
of a message or generate a maskable interrupt without being stored in the buffer. This option 
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is useful when flow control characters such as XON or XOFF are needed but are not part 
of the received message. See Section 22.9, “Receiving Control Characters.” 


22.6 Error and Status Reporting 


Overrun, parity, noise, and framing errors are reported via the BDs and/or error counters in 
the UART parameter RAM. Signal status is indicated in the status register; a maskable 
interrupt is generated when status changes. 


22.7 SCC UART Commands 


The transmit commands in Table 22-2 are issued to the CP command register (CPCR). 


STOP 
TRANSMIT 


Table 22-2. Transmit Commands 


ee) 


After a hardware or software reset and a channel is enabled in the GSMR, the transmitter starts polling 
the first BD in the TxBD table every 8 Tx clocks. STOP TRANSMIT disables character transmission. If the 
SCC receives STOP TRANSMIT as a message is being sent, the message is aborted. The transmitter 
finishes sending data transferred to its FIFO and stops. The TBPTR is not advanced. The UART 
transmitter sends a programmable break sequence and starts sending idles. The number of break 
characters in the sequence (which can be zero) should be written to BRKCR in the parameter RAM 
before issuing this command. 

































Used to stop transmitting smoothly. The transmitter stops after the current buffer has been completely 
sent or immediately if no buffer is being sent. SCCE[GRA] is set once transmission stops, then the 

UART Tx parameters, including the TxBD, can be modified. TBPTR points to the next TxBD in the table. 
Transmission begins once the R bit of the next BD is set and a RESTART TRANSMIT command is issued. 


GRACEFUL 
STOP 
TRANSMIT 










RESTART 
TRANSMIT 


Enables transmission. The controller expects this command after it disables the channel in its PSMR, 
after a STOP TRANSMIT command, after a GRACEFUL STOP TRANSMIT command, or after a transmitter 
error. Transmission resumes from the current BD. 














INIT TX Resets the transmit parameters in the parameter RAM. Issue only when the transmitter is disabled. 
PARAMETERS | Note that INIT TX AND RX PARAMETERS resets both Tx and Rx parameters. SO 


Receive commands are described in Table 22-2. 


Table 22-3. Receive Commands 


Description 


ENTER HUNT | Forces the receiver to close the RxBD in use and enter hunt mode. After a hardware or software reset, 
once an SCC is enabled in the GSMR, the receiver is automatically enabled and uses the first BD in the 
RxBD table. If a message is in progress, the receiver continues receiving in the next BD. In multidrop 
hunt mode, the receiver continually scans the input data stream for the address character. When it is not 
in multidrop mode, it waits for the idle sequence (one character of idle). Data present in the Rx FIFO is 
not lost when this command is executed. 


CLOSE RXBD | Forces the SCC to close the RxBD in use and use the next BD for subsequent received data. If the SCC 
is not in the process of receiving data, no action is taken. 
Note that in an SCC UART controller, CLOSE RXBD functions like ENTER HUNT MODE but does not need to 
receive an idle character to continue receiving. 


INIT RX Resets the receive parameters in the parameter RAM. Should be issued when the receiver is disabled. | 
PARAMETERS | Note that INIT TX AND RX PARAMETERS resets both Tx and Rx parameters. 
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22.8 Multidrop Systems and Address Recognition 


In multidrop systems, more than two stations can be on a network, each with a specific 
address. Figure 22-2 shows two examples of this configuration. Frames made up of many 
characters can be broadcast as long as the first character is the destination address. The 
UART frame is extended by one bit to distinguish an address character from standard data 
characters. Programmed in PSMR[UM], the controller supports the following two 
multidrop modes: 


¢ Automatic multidrop mode—The controller checks the incoming address character 
and accepts subsequent data only if the address matches one of two user-defined 
values. The two 16-bit address registers, UADDR1 and UADDR2, support address 
recognition. Only the lower 8 bits are used so the upper 8 bits should be cleared; for 
addresses less than 8 bits, unused high-order bits should also be cleared. The 
incoming address is checked against UADDR1 and UVADDR2. When a match 
occurs, Rx BD[AM] indicates whether VADDR1 or UADDR2 matched. 


e Manual multidrop mode—The controller receives all characters. An address 
character is always written to a new buffer and can be followed by data characters. 
User software performs the address comparison. 








UADDR2 Choose Wired-Or Operation in the Port A 


Open-Drain Register to Allow Multiple Transmit 
Pins to be Directly Connected 


UADDR1 PAODR 


Two 8-Bit Addresses can be Automatically 
Recognized in Either Configuration 


Figure 22-2. Two UART Multidrop Configurations 


22.9 Receiving Control Characters 


The UART receiver can recognize special control characters used in a message-based 
environment. Eight control characters can be defined in a control character table in the 
UART parameter RAM. Each incoming character is compared to the table entries using a 
mask (the received control character mask, RCCM) to strip don’t cares. If a match occurs, 
the received control character can either be written to the receive buffer or rejected. 
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If the received control character is not rejected, it is written to the receive buffer. The receive 
buffer is then automatically closed to allow software to handle end-of-message characters. 
Control characters that are not part of the actual message, such as XOFF, can be rejected. 
Rejected characters bypass the receive buffer and are written directly to the received control 
character register (RCCR), which triggers maskable interrupt. | 


The 16-bit entries in the control character table support control character recognition. Each 
entry consists of the control character, a valid bit (end of table), and a reject bit. See 
Figure 22-3. 


Ci CHARACTER 





1 From SCCx base address 


Figure 22-3. Control Character Table, RCCM, and RCCR 


Table 22-4 describes the data structure used in control character recognition. 


Table 22-4. Control Character Table, RCCM, and RCCR Descriptions 


End of table. In tables with eight control characters, E is always 0. 
0 This entry is valid. 
1 The entry is not valid and is not used. 


Reject character. 

0 A matching character is not rejected but is written into the Rx buffer, which is 
then closed. If RxBD[I] is set, the buffer closing generates a maskable interrupt 
through SCCE[RX]. A new buffer is opened if more data is in the message. 

1 A matching character is written to RCCR and not to the Rx buffer. A maskable 
interrupt is generated through SCCE[CCR]. The current Rx buffer is not closed. 


Ce 


8-15 | CHARACTERn | Control character values 1—8. Defines control characters to be compared to the 
incoming character. For characters smaller than 8 bits, the most significant bits 
should be zero. 
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Table 22-4. Control Character Table, RCCM, and RCCR Descriptions (Continued) 


Ed 


0x60 oe Must be set. Used to mark the end of the control character table in case eight 


characters are used. Setting these bits ensures correct operation during control 
Ee a 


character recognition. 
8-15 |RCCM Received control character mask. Used to mask the comparison of 
CHARACTERn. Each RCCM bit corresponds to the respective bit of 
CHARACTER)n and decodes as follows. 
0 Ignore this bit when comparing the incoming character to CHARACTERn. 
1 Use this bit when comparing the incoming character to CHARACTERn. 


RCCR Received control character register. lf the newly arrived character matches and is 


rejected from the buffer (R = 1), the PIP controller writes the character into the 
RCCR and generates a maskable interrupt. If the core does not process the 
interrupt and read RCCR before a new control character arrives, the previous 
contro! character is overwritten. 

22.10 Hunt Mode (Receiver) 

A UART receiver in hunt mode remains deactivated until an idle or address character is 
recognized, depending on PSMR[UM]. A receiver is forced into hunt mode by issuing an 
ENTER HUNT MODE command. 

























The receiver aborts any message in progress when ENTER HUNT MODE is issued. When the 
message is finished, the receiver is reenabled by detecting the idle line (one idle character) 
or by the address bit of the next message, depending on PSMR[UM]. When a receiver in 
hunt mode receives a break sequence, it increments BRKEC and generates a BRK interrupt 
condition. 


22.11 Inserting Control Characters into the Transmit 
Data Stream | 


The SCC UART transmitter can send out-of-sequence, flow-control characters like XON 
and XOFF. The controller polls the transmit out-of-sequence register (TOSEQ), shown in 
Figure 22-4, whenever the transmitter is enabled for UART operation, including during a 
UART freeze operation, UART buffer transmission, and when no buffer is ready for 
transmission. The TOSEQ character (in CHARSEND) is sent at a higher priority than the 
other characters in the transmit buffer, but does not preempt characters already in the 
transmit FIFO. This means that the XON or XOFF character may not be sent for eight 
(SCC2) or four (SCC3) character times. To reduce this latency, set GSMR_H[TFL] to 
decrease the FIFO size to one character before enabling the transmitter. 
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0000_0000_0000_0000 
R/W 
SCC base + Ox4E 


Figure 22-4. Transmit Out-of-Sequence Register (TOSEQ) 


P= fresl orf - [a HARSENC 





Table 22-5 describes TOSEQ fields. 
Table 22-5. TOSEQ Field Descriptions 


Ss 
Reserved, should be cleared. 


Ready. Set when the character is ready for transmission. Remains 1 while the character is 
being sent. The CP clears this bit after transmission. 


Interrupt. If this bit is set, transmission completion is flagged in the event register (SCCE[TX] is 
set), triggering a maskable interrupt to the core. 


Clear-to-send lost. Operates only if the SCC monitors CTS (GSMR_L[DIAG]). The CP sets this 
bit if CTS negates when the TOSEQ character is sent. If CTS negates and the TOSEQ 


character is sent during a buffer transmission, the TxBD[CT] status bit is also set. 


Reserved, should be cleared. 
Address. Setting this bit indicates an address character for multidrop mode. 


Character send. Contains the character to be sent. Any 5- to 8-bit character value can be sent 
in accordance with the UART configuration. The character should be placed in the Isbs of 
CHARSEND. This value can be changed only while REA = 0. 


-15 





22.12 Sending a Break (Transmitter) 


A break is an all-zeros character with no stop bit that is sent by issuing a STOP TRANSMIT 
command. The SCC finishes transmitting outstanding data, sends a programmable number 
of break characters (determined by BRKCR), and reverts to idle or sends data if a RESTART 
TRANSMIT command is given before completion. When the break code is complete, the 
transmitter sends at least one high bit before sending more data, to guarantee recognition 
of a valid start bit. Because break characters do not preempt characters in the transmit FIFO, 
they may not be sent for eight (SCC2) or four (SCC3) character times. To reduce this 
latency, set GSMR_H[TFL] to decrease the FIFO size to one character before enabling the 
transmitter. 


22.13 Sending a Preamble (Transmitter) 


Sending a preamble sequence of consecutive ones ensures that a line is idle before sending 
a message. If the preamble bit TxBDJ[P] is set, the SCC sends a preamble sequence (idle 
character) before sending the buffer. For example, for 8 data bits, no parity, 1 stop bit, and 
1 start bit, a preamble of 10 ones is sent before the first character in the buffer. 
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22.14 Fractional Stop Bits (Transmitter) 


The asynchronous UART transmitter can be programmed to send fractional stop bits. The 
FSB field in the data synchronization register (DSR) determines the fractional length of the 
last stop bit to be sent. FSB can be modified at any time. If two stop bits are sent, only the 
second is affected. Idle characters are always sent as full-length characters. 


OxA2E (DSR2), OxA4E (DSR3) 


Figure 22-5. Data Synchronization Register (DSR) 





Table 22-6 describes DSR fields. 
Table 22-6. DSR Fields Descriptions 


Li een 


att astmeterttrsieiaictinsetamninincnnintie stop bits. For 16x oversampling: 
1111 Last transmitted stop bit 16/16. Default value after reset. 
1110 Last transmitted stop bit 15/16. 


1000 Last transmitted stop bit 9/16. 
Oxxx Invalid. Do not use. 
For 32x oversampling: 
1111 Last transmitted stop bit 32/32. Default value after reset. 
1110 Last transmitted stop bit 31/32. 


0000 Last transmitted stop bit 17/32. 
For 8x oversampling: 

1111 Last transmitted stop bit 8/8. Default value after reset. 

1110 Last transmitted stop bit 7/8. 

1101 Last transmitted stop bit 6/8. 

1100 Last transmitted stop bit 5/8. 

10xx Invalid. Do not use. 

Oxxx Invalid. Do not use. 
The UART receiver can always receive fractional stop bits. The next character’s start bit can begin 
any time after the three middle samples have been taken. 
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22.15 Handling Errors in the SCC UART Controller 


The UART controller reports character reception and transmission error conditions via the 
BDs, the error counters, and the SCCE. Modem interface lines can be monitored by the port 
C pins. Transmission errors are described in Table 22-7. 


Table 22-7. Transmission Errors 


Cee fee 


CTS Lost When CTS negates during transmission, the channel stops after finishing the current character. The 


during CP sets TxBD[CT] and generates the TX interrupt if it is not masked. The channel resumes 

Character transmission after the RESTART TRANSMIT command is issued and CTS is asserted. 

Transmission | Note that if CTS is used, the UART also offers an asynchronous flow contro! option that does not 
generate an error. See the description of PSMR[FLC] in Table 22-9. 





Reception errors are described in Table 22-8. 


Table 22-8. Reception Errors 


cee fee 


Overrun | Occurs when the channel overwrites the previous character in the Rx FIFO with a new character, losing 
the previous character. The channel then writes the new character to the buffer, closes it, sets RxBD[OV], 
and generates an RX interrupt if not masked. In automatic multidrop mode, the receiver enters hunt mode 
immediately. 




















If this error occurs and the channel is using this pin to automatically control reception, the channel 
terminates character reception, closes the buffer, sets RxBD[CD], and generates the RX interrupt if not 

masked. This error has the highest priority. The last character in the buffer is lost and other errors are not 
checked. In automatic multidrop mode, the receiver enters the hunt mode immediately. 


CD Lost 
during 

Character 
Reception 






When a parity error occurs, the channel writes the received character to the buffer, closes the buffer, sets 
RxBD[PR], and generates the RX interrupt if not masked. The channel also increments the parity error 
counter PAREC. In automatic multidrop mode, the receiver enters hunt mode immediately. 










A noise error occurs when the three samples of a bit are not identical. When this error occurs, the channel 
writes the received character to the buffer, proceeds normally, but increments the noise error counter 
NOSEC. Note that this error does not occur in synchronous mode. 









If the UART is receiving data and gets an idle character (all ones), the channel begins counting 
consecutive idle characters received. lf MAX_IDL is reached, the buffer is closed and an RX interrupt is 
generated if not masked. If no buffer is open, this event does not generate an interrupt or any status 
information. The internal idle counter (IDLC) is reset every time a character is received. To disable the idle 
sequence function, clear MAX_IDL. 


Receive 


Framing {|The UART reports a framing errors when it receives a character with no stop bit, regardless of the mode. 
The channel writes the received character to the buffer, closes it, sets RxBD[FR], generates the RX 
interrupt if not masked, increments FRMEC, but does not check parity for this character. In automatic 
multidrop mode, the receiver immediately enters hunt mode. If the UART allows data with no stop bits 
(PSMR[RZS] = 1) when in synchronous mode (PSMRI[SYN] = 1), framing errors are reported but 
reception continues assuming the unexpected zero is the start bit of the next character; in this case, the 
user may ignore a reported framing error until multiple framing errors occur within a short period. 





When the first break sequence is received, the UART increments the break error counter BRKEC. It 
updates BRKLN when the sequence completes. After the first 1 is received, the UART sets SCCE[BRKE], 
which generates an interrupt if not masked. If the UART is receiving characters when it receives a break, 
it closes the Rx buffer, sets RxBD[BR], and sets SCCE[RX], which can generate an interrupt if not 
masked. If PSMR[RZS] = 1 when the UART is in synchronous mode, a break sequence is detected after | 
two successive break characters are received. 
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22.16 UART Mode Register (PSMR) 


For UART mode, the SCC protocol-specific mode register (PSMR) is called the UART 
mode register. Many bits can be modified while the receiver and transmitter are enabled. 
Figure 22-6 shows the PSMR in UART mode. 





RW 
0xA28 (PSMR2), 0xA48 (PSMR3) 


Figure 22-6. Protocol-Specific Mode Register for UART (PSMR) 


Table 22-9 describes PSMR UART fields. 
Table 22-9. PSMR UART Field Descriptions 


Flow control. 
O Normal operation. The GSMR and port C registers determine the mode of CTS. 


1 Asynchronous flow control. When CTS is negated, the transmitter stops at the end of the current 
character. If CTS is negated past the middle of the current character, the next full character is sent 
before transmission stops. When CTS is asserted again, transmission continues where it left off 


and no CTS lost error is reported. Only idle characters are sent while CTS is negated. 








amarante ee 


Stop length. Selects the number of stop bits the SCC sends. SL can be modified on-the-fly. The 
receiver is always enabled for one stop bit unless the SCC UART is in synchronous mode and 
PSMR[RZS] is set. Fractional stop bits are configured in the DSR. 
10 One stop bit. 

1 Two stop bits. 





Character length. Determines the number of data bits in the character, not including optional parity or 
multidrop address bits. If a character is less than 8 bits, most-significant bits are received as zeros 
and are ignored when the character is sent. CL can be modified on-the-fly. 

00 5data bits 
101 6 data bits 
10 7 data bits 
111 8 data bits 


UART mode. Selects the asynchronous channel protocol. UM can be modified on-the-fly. 

00 Normal UART operation. Muiltidrop mode is disabled and idle-line wake-up mode is selected. The 
UART receiver leaves hunt mode by receiving an idle character (all ones). 

01 Manual multidrop mode. An additional address/data bit is sent with each character. Multidrop 
asynchronous modes are compatible with the MC68681 DUART, MC68HC11 SCI, DSP56000 
SCI, and Intel 8051 serial interface. The receiver leaves hunt mode when the address/data bit is a | 
one, indicating the received character is an address that all inactive processors must process. 
The controller receives the address character and writes it to a new buffer. The core then 
compares the written address with its own address and decides whether to ignore or process 
subsequent characters. 

10 Reserved. 

11 Automatic multidrop mode. The CPM compares the address of an incoming address character 
with UADDRx parameter RAM values; subsequent data is accepted only if a match occurs. 
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Table 22-9. PSMR UART Field Descriptions (Continued) 


Freeze transmission. Allows the UART transmitter to pause and later continue from that point. 

O Normal operation. If the buffer was previously frozen, it resumes transmission from the next 
character in the same buffer that was frozen. 

1 The SCC completes transmission of any data already transferred to the Tx FIFO (the number of 
characters depends on GSMR_H[TFL]) and then freezes. After FRZ is cleared, transmission 
resumes from the next character. 


RZS___| Receive zero stop bits. 
0 The receiver operates normally, but at least one stop bit is needed between characters. A framing 
error is issued if a stop bit is missing. Break status is set if an all-zero character is received with a 
zero stop bit. 
Configures the receiver to receive data without stop bits. Useful in V.14 applications where SCC 
UART controller data is supplied synchronously and all stop bits of a particular character can be 
omitted for cross-network rate adaptation. RZS should be set only if SYN is set. The receiver 
continues if a stop bit is missing. If the stop bit is a zero, the next bit is considered the first data bit 
DRT 


of the next character. A framing error is issued if a stop bit is missing, but a break status is reported 
only after two consecutive break characters have no stop bits. 


Synchronous mode. 

0 Normal asynchronous operation. GSMR_L[TENC,RENC] must select NRZ and GSMR_L[TDCR, 
RDCR] select either 8x, 16x, or 32x. 16x is recommended for most applications. 

1 Synchronous SCC UART controller using 1x clock (isochronous UART operation). 
GSMR_L[TENC, RENC] must select NRZ and GSMR_L[RDCR, TDCR] select 1x mode. A bit is 
transferred with each clock and is synchronous to the clock, which can be internal or external. 


Disable receiver while transmitting. 

0 Normal operation. 

1 While the SCC is sending data, the internal RTS disables and gates the receiver. Useful for a 
multidrop configuration in which the user does not want to receive its own transmission. For 
multidrop UART mode, set the BDs’ preamble bit, TxBD[P]. 


Reserved, should be cleared. . 


Parity enable. 
0 No parity. 
1 Parity is enabled and determined by the parity mode bits. 
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ae 


12-13, | RPM, | Receiver/transmitter parity mode. Selects the type of parity check the receiver/transmitter performs; 
14-15 {TPM _ j|can be modified on-the-fly. Receive parity errors can be ignored but not disabled. 
00 Odd parity. If a transmitter counts an even number of ones in the data word, it sets the parity bit so 


an odd number is sent. If a receiver receives an even number, a parity error is reported. 

01 Low parity (space parity). A transmitter sends a zero in the parity bit position. If a receiver does 
not read a 0 in the parity bit, a parity error is reported. 

10 Even parity. Like odd parity, the transmitter adjusts the parity bit, as necessary, to ensure that the 
receiver receives an even number of one bits; otherwise, a parity error is reported. 

11 High parity (mark parity). The transmitter sends a one in the parity bit position. If the receiver does 
not read a 1 in the parity bit, a parity error is reported. 
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22.17 SCC UART Receive Buffer Descriptor (RxBD) 


The CPM uses RxBDs to report on each buffer received. The CPM closes the current buffer, 
generates a maskable interrupt, and starts receiving data into the next buffer after one of the 
following occurs: 

e A user-defined control character is received. 

e An error occurs during message processing. 

e A full receive buffer is detected. 

e A MAX_IDL number of consecutive idle characters is received. 

e An ENTER HUNT MODE or CLOSE RXBD command is issued. 

e An address character is received in multidrop mode. The address character is written 


to the next buffer for a software comparison. 


Figure 22-7 shows an example of how RxBDs are used in receiving. 
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Rx BD 0 MRBLR = 8 Bytes for this SMC 
EF ID | | __ Buffer 


Status 
Length 0008 

















Pointer 32-Bit Buffer Pointer Buffer Full 














E ID Buffer 
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Length Byte 10 








Pointer Idle Time-Out 
Occurred 








E ID FR Buffer 







Status | Byte 1 








Length 0004 Byte 2 


32-Bit Buffer Pointer Byte 4 has Byte 3 
Framing Error 












Pointer 





Byte 4 Error! 





Rx BD 3 
E Buffer 


Status 
Length XXXX 











Pointer 32-Bit Buffer Pointer Reception 
Still in Progress 
with this Buffer 














< 10 Characters 5 Characters > 
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Long Idle Period 


Characters ' 
Received by UART | 
Time Fourth Character Present 


has Framing Error! = Time 


Figure 22-7. SCC UART Receiving using RxBDs 
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Figure 22-8 shows the SCC UART RxBD. 


pet -|wi ite] a few) w fam] — [oa] ra] pr] - | ov} co 


Data Length 


Rx Buffer Pointer 





Figure 22-8. SCC UART RxBD 


Table 22-10 describes RxBD status and control fields. 
Table 22-10. SCC UART RxBD Status and Control Field Descriptions 


apm em 


; te buffer i is full or reception was aborted due to an error. The core can read or write to any fields of 
this BD. The CPM does not reuse this BD while E = 0. 
1 The buffer is not full. The CPM controls this BD and buffer. The core should not modify this BD. 


Reserved, should be cleared. 


Wrap (last buffer descriptor in the BD table). 

0 Not the last descriptor in the table. 

1 Last descriptor in the table. After this buffer is used, the CPM receives incoming data using the BD 
pointed to by RBASE. The number of BDs in this table is programmable and determined only by the W 
bit and overall space constraints of the dual-port RAM. 


Interrupt. 

0 No interrupt is generated after this buffer is filled. 

1 The CP sets SCCE[RX] when this buffer is completely filled by the CPM, indicating the need for the 
core to process the buffer. Setting SCCE[RX] causes an interrupt if not masked. 


Control character. 
0 This buffer does not contain a control character. 
1 The last byte in this buffer matches a user-defined control character. 


Address. 

O The buffer contains only data. 

1 For manual multidrop mode, A indicates the first byte of this buffer is an address byte. Software should 
perform address comparison. In automatic multidrop mode, A indicates the buffer contains a message 
received immediately after an address matched UADDR1 or UADDR2. The address itself is not written 
to the buffer but is indicated by the AM bit. 


Continuous mode. 

0 Normal operation. The CPM clears E after this BD is closed. 

1 The CPM does not clear E after this BD is closed, allowing the buffer to be overwritten when the CPM 
accesses this BD again. E is cleared if an error occurs during reception, regardless of CM. 


Buffer closed on reception of idles. The buffer is closed because a programmable number of consecutive 
idle sequences (MAX_IDL) was received. 


Address match. Significant only if the address bit is set and automatic multidrop mode is selected in 
PSMR([UM]. After an address match, AM identifies which user-defined address character was matched. 
O The address matched the value in UADDR2. 

1 The address matched the value in UADDR1. 


ae Reserved, should be cleared. 
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Table 22-10. SCC UART RxBD Status and Control Field Descriptions (Continued) 


EC 
ae Break received. Set when a break sequence is received as data is being received into this buffer. 


Framing error. Set when a character with a framing error (a character without a stop bit) is received and 
located in the last byte of this buffer. A new Rx buffer is used to receive subsequent data. 


Parity error. Set when a character with a parity error is received and located in the last byte of this buffer. 
A new Rx buffer is used to receive subsequent data. 


i a Reserved, should be cleared. 


Overrun. Set when a receiver overrun occurs during reception. 


Carrier detect lost. Set when the carrier detect signal is negated during reception. 





Section 21.3, “SCC Buffer Descriptors (BDs),” describes the data length and buffer pointer 
fields. 


22.18 SCC UART Transmit Buffer Descriptor (TxBD) 


The CPM uses BDs to confirm transmission and indicate error conditions so the core knows 
that buffers have been serviced. Figure 22-9 shows the SCC UART TxBD. 


PRS CeR CIT ee 2 a eee 
Data Length 


Tx Buffer Pointer 





Figure 22-9. SCC UART Transmit Buffer Descriptor (TxBD) 


Table 22-11 describes TxBD status and control fields. 
Table 22-11. SCC UART TxBD Status and Control Field Descriptions 


Ns 


0 The buffer is not ready. This BD and buffer can be modified. The CPM automatically clears R after 
the buffer is sent or an error occurs. 

1 The user-prepared buffer is waiting to begin transmission or is being transmitted. Do not modify the 
BD once R is set. 


Wrap (last buffer descriptor in TxBD table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM sends data using the BD pointed to by 
TBASE. The number of TxBDs in this table is determined only by the W bit and space constraints of 
the dual-port RAM. 
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Description 













Interrupt. 
0 No interrupt is generated after this buffer is processed. 
1 SCCE[TX] is set after this buffer is processed by the CPM, which can cause an interrupt. 


CR Clear-to-send report. 
O The next buffer is sent with no delay (assuming it is ready), but if a CTS lost condition occurs, 
TxBD[CT] may not be set in the correct TxBD or may not be set at all. Asynchronous flow control, 
; however, continues to function normally. 

1 Normal CTS lost error reporting and three bits of idle are sent between consecutive buffers. 





Address. Valid only in multidrop mode—automatic or manual. 
0 This buffer contains only data. 
1 This buffer contains address characters. All data in this buffer is sent as address characters. 









Continuous mode. 
O Normal operation. The CPM clears R after this BD is closed. 

1 The CPM does not clear R after this BD is closed, allowing the buffer to be resent next time the 
CPM accesses this BD. However, R is cleared by transmission errors, regardless of CM. 





Preamble. 

0 No preamble sequence is sent. 
1 Before sending data, the controller sends an idle character consisting of all ones. If the data length 
of this BD is zero, only a preamble is sent. 






No stop bit or shaved stop bit sent. 

0 Normal operation. Stop bits are sent with all characters in this buffer. 

1 If PSMR[SYN] = 1, data in this buffer is sent without stop bits. If SYN = 0, the stop bit is shaved, 
depending on the DSR setting; see Section 22.14, “Fractional Stop Bits (Transmitter).” 


e4|— | Reserved, should be cleared. 


CTS lost. The CPM writes this status bit after sending the associated buffer. 


O CTS remained asserted during transmission. 
1 CTS negated during transmission. 

The data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 

Descriptors (BDs).” 









22.19 SCC UART Event Register (SCCE) and Mask 
Register (SCCM) 


The SCC event register (SCCE) is used to report events recognized by the UART channel 
and to generate interrupts. When an event is recognized, the controller sets the 
corresponding SCCE bit. Interrupts can be masked in the UART mask register (SCCM), 
which has the same format as SCCE. Setting a mask bit enables the corresponding SCCE 
interrupt; clearing a bit masks it. Figure 22-10 shows example interrupts that can be 
generated by the SCC UART controller. 
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Characters 
Received by UART 
| 10 Characters — 
Time ——-> ee _____p Line Idle 







Line Idle 


ee “ER: SID RX CCR IDL RX IDL BRKS BRKE IDL CD 





Notes: 
1. The first RX event assumes Rx buffers are 6 bytes each. 
2. The second IDL event occurs after an all-ones character is received. 
3. The second RX event position is programmable based on the MAX_IDL value. 
4. The BRKS event occurs after the first break character is received. 
5. The CD event must be programmed in the port C parallel I/O, not in the SCC itself. 


Legend: 
| A receive control character defined not to be stored in the Rx buffer. 


Characters bias 
Transmitted by UART fee 
TXD Line Idle Tee 





CTS 
UART SCCE t 
Saas CTS T™ CTS 
Notes: 


1. TX event assumes all seven characters were put into a single buffer and TxBD[CR]=1. 
2. The CTS event must be programmed in the port C parallel I/O, not in the SCC itself. 


Figure 22-10. SCC UART Interrupt Event Example 


SCCE bits are cleared by writing ones; writing zeros has no effect. Unmasked bits must be 
cleared before the CPM clears an internal interrupt request. Figure 22-11 shows 
SCCE/SCCM for UART operation. 


| = Jaan] ur] — [os [os Jona oms] — Jeenjesy| | 


0xA30 (SCCE2)/0xA34 (SCCM2); 0xA50 (SCCE3)/0xA54 (SCCM3) 
Figure 22-11. SCC UART Event Register (SCCE) and Mask Register (SCCM) 
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Table 22-12 describes SCCE fields for UART mode. 
Table 22-12. SCCE/SCCM Field Descriptions for UART Mode 


CC 
oz [= _[Rewnenchendvecmwes 
[eR [serena Setwen the SCD snnuiowanRecbacge 
fas 
S| __[Resnensnesboceues 















& i; @Oto 





oO 









Autobaud. Set when an autobaud lock is detected. The core should rewrite the baud rate generator with 
the precise divider value. See Section 20.4, “Baud Rate Generators (BRGs).” 
da 
GRA _ | Graceful stop complete. Set as soon as the transmitter finishes any buffer in progress after a GRACEFUL 
STOP TRANSMIT Command is issued. It is set immediately if no buffer is in progress. 


a BRKE | Break end. Set when an idle bit is received after a break sequence. 


BRKS | Break start. Set when the first character of a break sequence is received. Multiple BRKS events are not 
| received if a long break sequence is received. 


on Reserved, should be cleared. | 


CCR_ | Control character received and rejected. Set when a control character is recognized and stored in the 
receive control character register RCCR. 


Busy. Set when a character is received and discarded due to a lack of buffers. In multidrop mode, the 
receiver automatically enters hunt mode; otherwise, reception continues when a buffer is available. The 
latest point that an RxBD can be changed to empty and guarantee avoiding the busy condition is the 
middle of the stop bit of the first character to be stored in that buffer. 


Idle sequence status changed. Set when the channel detects a change in the serial line. The line’s 
real-time status can be read in SCCS[ID]. Idle is entered when a character of all ones is received; it is 
exited when a zero is received. 


NJ 





















Tx event. Set when a buffer is sent. If T<BD[CR] = 1, TX is set no sooner than when the last stop bit of 
the last character in the buffer begins transmission. If T<BD[CR] = 0, TX is set after the last character is 
written to the Tx FIFO. TX also represents a CTS lost error; check TxBD[CT]. 


Rx event. Set when a buffer is received, which is no sooner than the middle of the first stop bit of the 
character that caused the buffer to close. Also represents a general receiver error (overrun, CD lost, 
parity, idle sequence, and framing errors); the RxBD status and control fields indicate the specific error. 


22.20 SCC UART Status Register (SCCS) 


The SCC UART status register (SCCS), shown in Figure 22-12, monitors the real-time 
status of RXD. The real-time status of CTS and CD is part of the port C as 1/0. 


0000_0000_0000_0000 
0xA37 (SCCS2), 0xA57 (SCCS3) 


Figure 22-12. SCC Status Register for UART Mode (SCCS) 
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Table 22-13 describes UART SCCS fields. . 


Table 22-13. UART hehe Field Descriptions | 


ee 
ae ee Reserved, should be cleared. 


Idle status. Set when RXD has been a logic one for at least a full character time. 
0 The line is not idle. 
1 The line is idle. 





22.21 SCC UART Programming Example 


The following initialization sequence is for the 9,600 baud, 8 data bits, no parity, and stop 
bit of an SCC in UART mode assuming a 25-MHz system frequency. BRG1 and SCC2 are 
used. The controller is configured with RTS2, CTS2, and CD2 active; CTS2 acts as an 
automatic flow-control signal. 








1. Configure port A to enable TXD2 and RXD2. Set PAPAR[12, 13] and clear 
PADIR[12,13] and PAODR[12,13]. 


2. Configure port C to enable RTS2, CTS2, and CD2. Set PCPAR[14] andPCSO[8 9] 
and clear PCPAR[8,9] and PCDIR[8,9,14]. 


3. Configure BRG1. Write BRGC1 with 0x010144. The DIV 16 bit is not used and the 
divider is 162 (decimal). The resulting BRG1 clock is 16x the preferred bit rate. 


. Connect BRG1 to SCC2 using the serial interface. Clear SICR[R2CS ,T2CS]. 
. Initialize the SDMA configuration register (SDCR = 0x0001 for normal operation). 
. Connect the SCC2 to the NMSI. Clear SICR[SC2]. 


. Write RBASE and TBASE in the SCC2 parameter RAM to point to the RxBD and 
TxBD tables in dual-port RAM. Assuming one RxBD at the start of dual-port RAM 
_ followed by one TxBD, write RBASE with 0x0000 and TBASE with 0x0008. 


8. Write 0x0041 to CPCR to execute the INIT RX AND TX PARAMS command for SCC2. 
This command updates RBPTR and TBPTR of the serial channel with the new 
values of RBASE and TBASE. 


9. Write RFCR with 0x10 and TFCR with 0x10 for normal operation. 


10.Write MRBLR with the maximum number of bytes per Rx buffer. For this case, 
assume 16 bytes, so MRBLR = 0x0010. 


11.Write MAX_IDL with 0x0000 in the parameter RAM to disable the maximum idle 
functionality for this example. 


12.Set BRKCR to 0x0001 so STOP TRANSMIT commands send only one break character. 
13.Clear PAREC, FRMEC, NOSEC, and BRKEC in parameter RAM. 

14.Clear VADDR1 and UADDR2. They are not used. 

15.Clear TOSEQ. It is not used. 


SN MN A 
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16. Write CHARACTERI1-—8 with 0x8000. They are not used. 
17. Write RCCM with OxCOFF. It is not used. 


18. Initialize the RxBD. Assume the Rx buffer is at 0x0000_1000 in main memory. 
Write 0xBO000 to the RxBD[Status and Control], 0x0000 to RxBD[Data Length] 
(optional), and Ox0000_1000 to RxBD[Buffer Pointer]. 


19. Initialize the TxBD. Assume the buffer is at OxO000_2000 in main memory and 
contains sixteen 8-bit characters. Write OxBO00 to the TxBD[Status and Control], 
0x0010 to TxBD[Data Length], and 0x00002000 to TxBD[Buffer Pointer]. 


20. Write OXFFFF to SCCE2 to clear any previous events. 
21.Write 0x0003 to SCCM2 to allow the TX and RX interrupts. 


22. Write 0x2000_0000 to the CPM interrupt mask register (CIMR) to allow SCC2 to 
generate a system interrupt. The CICR should also be initialized. 


23. Write OxO000_0020 to GSMR_H2 to configure a small Rx FIFO width. 


24. Write 0x0002_8004 to GSMR_L2 to configure 16x sampling for transmit and 
receive, CTS and CD to automatically control transmission and reception (DIAG 
bits), and the SCC for UART mode. Notice that the transmitter (ENT) and receiver 
(ENR) have not been enabled yet. 


25.Set PSMR2 to OxBO00 to configure automatic flow control using CTS, 8-bit 
characters, no parity, 1 stop bit, and asynchronous SCC UART operation. 


26. Write 0x0002_8034 to GSMR_L2 to enable the transmitter and receiver. This 
ensures that ENT and ENR are enabled last. 


Note that after 16 bytes are sent, the transmit buffer is closed. Additionally, the receive 
buffer is closed after 16 bytes are received. Data received after 16 bytes causes a busy 
(out-of-buffers) condition because only one RxBD is prepared. 


22.22 S-Records Loader Application 


This section describes a downloading application that uses an SCC UART controller. The 
application performs S-record downloads and uploads between a host computer and an 
intelligent peripheral through a serial asynchronous line. S-records are strings of ASCII 
characters that begin with ‘S’ and end in an end-of-line character. This characteristic is used 
to impose a message structure on the communication between the devices. For flow control, 
each device can transmit XON and XOFF characters, which are not part of the program 
being uploaded or downloaded. 


For simplicity, assume that the line is not multidrop (no addresses are sent) and that each 
S-record fits into a single buffer. Follow the basic UART initialization sequence above in 
Section 22.21, “SCC UART Programming Example,’ except allow for more and larger 
buffers and create the control character table as described in Table 22-14. 
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Table 22-14. UART Control Characters for S-Records Example 


Line Feed Both the E and R bits should be cleared. When an end-of-line character is received, the current buffer is 
closed and made available to the core for processing. This buffer contains an entire S record that the 
processor can now check and copy to memory or disk as required. 


E should be cleared; R should be set. Whenever the core receives a control-character-received (CCR) 


interrupt and the RCCR contains XOFF, the software should immediately stop transmitting by setting 
PSMR[FRZ]. This keeps the other station from losing data when it runs out of Rx buffers. 


XON should be received after XOFF. E should be cleared and R should be set. PSMR[FRZ] on the 
transmitter should now be cleared. The CPM automatically resumes transmission of the serial line at the 
point at which it was previously stopped. Like XOFF, the XON character is not stored in the receive buffer. 





To receive S-records, the core must wait for an RX interrupt, indicating that a complete 
S-record buffer was received. Transmission requires assembling S-records into buffers and 
linking them to the TxBD table; transmission can be paused when an XOFF character is 
received. This scheme minimizes the number of interrupts the core receives (one per 
S-record) and relieves it from continually scanning for control characters. 
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HDLC (high-level data link control) is one of the most common protocols in the data link 
layer, layer 2 of the OSI model. Many other common layer 2 protocols, such as SDLC, 
SS#7, AppleTalk, LAPB, and LAPD, are based on HDLC and its framing structure in 
particular. Figure 23-1 shows the HDLC framing structure. 


HDLC uses a zero insertion/deletion process (bit-stuffing) to ensure that a data bit pattern 
matching the delimiter flag does not occur in a field between flags. The HDLC frame is 
synchronous and relies on the physical layer for clocking and synchronization of the 
transmitter/receiver. 


An address field is needed to carry the frame's destination address because the layer 2 frame 
can be sent over point-to-point links, broadcast networks, packet-switched or 
circuit-switched systems. An address field is commonly 0, 8, or 16 bits, depending on the 
data link layer protocol. SDLC and LAPB use an 8-bit address. SS#7 has no address field 
because it is always used in point-to-point signaling links. LAPD divides its 16-bit address 
into different fields to specify various access points within one device. LAPD also defines 
a broadcast address. Some HDLC-type protocols permit addressing beyond 16 bits. 





The 8- or 16-bit control field provides a flow control number and defines the frame type 
(control or data). The exact use and structure of this field depends on the protocol using the 
frame. The length of the data in the data field depends on the frame protocol. Layer 3 frames 
are carried in this data field. Error control is implemented by appending a cyclic redundancy 
check (CRC) to the frame, which in most protocols is 16 bits long but can be as long as 32 
bits. In HDLC, the lsb of each octet is sent first; the msb of the CRC is sent first. 


HDLC mode is selected for an SCC by writing GSMR_L[MODE] = Ob0000. In a 
nonmultiplexed modem interface, SCC outputs connect directly to external pins. Modem 
signals can be supported through port C. The Rx and Tx clocks can be supplied from either 
the bank of baud rate generators, by the DPLL, or externally. An SCC can also be connected 
through the TDM channels of the serial interface (SI). In HDLC mode, an SCC becomes 
an HDLC controller, and consists of separate transmit and receive sections whose 
operations are asynchronous with the core and can either be synchronous or asynchronous 
with respect to other SCCs. 
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23.1 SCC HDLC Features 


The main features of an SCC in HDLC mode are follows: 


e Flexible buffers with multiple buffers per frame 
e Separate interrupts for frames and buffers (Rx and Tx) 
e Received-frames threshold to reduce interrupt overhead 
e Can be used with the SCC DPLL 
e Four address comparison registers with mask 
e Maintenance of five 16-bit error counters 
e Flag/abort/idle generation and detection 
e Zero insertion/deletion 
¢ 16- or 32-bit CRC-CCITT generation and checking 
© Detection of nonoctet aligned frames 
e Detection of frames that are too long 
e Programmable flags (O—15) between successive frames 
e Automatic retransmission in case of collision 


23.2 SCC HDLC Channel Frame Transmission 


The HDLC transmitter is designed to work with little or no core intervention. Once enabled 
by the core, a transmitter starts sending flags or idles as programmed in the HDLC mode 
register (PSMR). The HDLC polls the first BD in the TxBD table. When there is a frame to 
transmit, the SCC fetches the data from memory and starts sending the frame after sending 
the minimum number of flags specified between frames. When the end of the current buffer 
is reached and TxBD[L] (last buffer in frame) is set, the CRC and closing flag are appended. 

In HDLC mode, the Isb of each octet and the msb of the CRC are sent first. Figure 23-1 
shows a typical HDLC frame. 


Opening Fag ntrmaton (Optional) Closing Flag 


8 bits 16 bits 8 bits 8n bits 16 bits 8 bits 


Figure 23-1. HDLC Framing Structure 


After a closing flag is sent, the SCC updates the frame status bits of the BD and clears 
TxBD[R] (buffer ready). At the end of the current buffer, if TxBD[L] is not set (multiple 
buffers per frame), only TxBD[R] is cleared. Before the SCC proceeds to the next TxBD in 
the table, an interrupt can be issued if TxBD[I] is set. This interrupt programmability allows 
the core to intervene after each buffer, after a specific buffer, or after each frame. 


The STOP TRANSMIT command can be used to expedite critical data ahead of previously 
linked buffers or to support efficient error handling. When the SCC receives a STOP 
TRANSMIT command, it sends idles or flags instead of the current frame until it receives a 
RESTART TRANSMIT command. The GRACEFUL STOP TRANSMIT command can be used to 
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insert a high-priority frame without aborting the current one—a graceful-stop-complete 
event is generated in SCCE[GRA] when the current frame is finished. See Section 23.6, 
“SCC HDLC Commands.” 


23.3 SCC HDLC Channel Frame Reception 


The HDLC receiver is designed to work with little or no core intervention to perform 
address recognition, CRC checking, and maximum frame length checking. Received 
frames can be used to implement any HDLC-based protocol. 


Once enabled by the core, the receiver waits for an opening flag character. When it detects 
the first byte of the frame, the SCC compares the frame address with four 
user-programmable, 16-bit address registers and an address mask. The SCC compares the 
received address field with the user-defined values after masking with the address mask. To 
detect broadcast (all ones) address frames, one address register must be written with all 
ones. 


If an address match is detected, the SCC fetches the next BD and SCC starts transferring 
the incoming frame to the buffer if it is empty. When the buffer is full, the SCC clears 
RxBDJ[E] and generates a maskable interrupt if RxBD[I] is set. If the incoming frame is 
larger than the current buffer, the SCC continues receiving using the next BD in the table. 


During reception, the SCC checks for frames that are too long (using MFLR). When the 
frame ends, the CRC field is checked against the recalculated value and written to the 
buffer. RxBD[Data Length] of the last BD in the HDLC frame contains the entire frame 
length. This also enables software to identify the frames in which the maximum frame 
length violations occur. The SCC sets RxBD[L] (last buffer in frame), writes the frame 
status bits, and clears RxBDJ[E]. It then generates a maskable event (SCCE[RXF]) to 
indicate a frame was received. The SCC then waits for a new frame. Back-to-back frames 
can be received with only one shared flag between frames. 





The received frames threshold parameter (RFTHR) can be used to postpone interrupts until 
a specified number of frames is received. This function can be combined with a timer to 
implement a timeout if fewer than the specified number of threshold frames is received. 


Note that SCCs in HDLC mode, or any other synchronous mode, must receive a minimum 
of eight clocks after the last bit arrives to account for Rx FIFO delay. 


23.4 SCC HDLC Parameter RAM 


For HDLC mode, the protocol-specific area of the SCC parameter RAM is mapped as in 
Table 23-1. 
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Table 23-1. HDLC-Specific SCC Parameter RAM Memory Map 


Cae we | 
SN 


0x34 C_MASK_ |Word CRC mask. For the 16-bit CRC-CCITT, initialize with OxO000_FOB8. For 32-bit 
CRC-CCITT, initialize with OxDEBB_20E3. 


a 


; 
















CRC preset. For the 16-bit CRC-CCITT, initialize with OxO000_FFFF. For 32-bit 
CRC-CCITT, initialize with OxFFFF_FFFF. 

























Modulo 2 counters maintained by the CPM. Initialize them while the channel is 
disabled. 
DISFC (Discarded frame counter) Counts error-free frames discarded due to lack of 
free buffers. 

CRCEC (CRC error counter) Includes frames not addressed to the user or frames 
received in the BSY condition, but does not include overrun errors. 

ABTSC (Abort sequence counter) 

NMARC (Nonmatching address received counter) Includes error-free frames only. 
RETRC (Frame retransmission counter) Counts number of frames resent due to 
collision. 


Max frame length register. The HDLC compares the incoming HDLC frame’s length 
with the user-defined limit in MFLR. If the limit is exceeded, the rest of the frame is 
discarded and RxBD[LG] is set in the last BD of that frame. At the end of the frame 
the SCC reports frame status and frame length in the last RxBD. The MFLR is 
defined as all in-frame bytes between the opening and closing flags. 





Received frames threshold. Used to reduce potential interrupt overhead when each 
in a series of short HDLC frames causes an SCCE[RXF] event. Setting RFTHR 


MAX_CNT Maximum length counter. A temporary down-counter used to track frame length. 
determines the frequency of RXF interrupts, which occur only when the RFTHR limit 
is reached. Provide enough empty RxBDs for the number of frames specified in 


RFTHR Hword 
RFTHR. 


RFCNT Received frames count. RFCNT is a down-counter used to implement RFTHR. 
FHMASK — |Hword | | Mask register (HMASK) and four address registers (HADDRn) for address 


recognition. The SCC reads the frame address from the HDLC receiver, compares it 
HADDR1 with the HADDRs, and masks the result with HMASK. Setting an HMASK bit enables 
HADDR2 the corresponding comparison bit, clearing a bit masks it. When a match occurs, the 
| frame address and data are written to the buffers. When no match occurs and a 
0x54 | HADDR3 
0x56 HADDR4 | Hword 
should contain OxFFFF. For 8-bit addresses, clear the eight high-order HMASK bits. 
| See Figure 23-2. 


frame is error-free, the nonmatching address received counter (NMARC) is 
incremented. 
Ox5A TMP_MB Temporary storage. 


The eight low-order bits of HADDRn should contain the first address byte after the 
' From SCC base. SCC base = IMMR + 0x3D00 (SCC2) or Ox3E00 (SCC3) 
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opening flag. For example, to recognize a frame that begins 0x7E (flag), 0x68, OxAA, 
using 16-bit address recognition, HADDRn should contain OxAA68 and HMASK 


© 
x< 

Ol 
©O 
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Figure 23-2 shows 16- and 8-bit address recognition. 
16-Bit Address Recognition 8-Bit Address Recognition 
Flag Address Address Control Flag | Address | Control 
Ox7E 0x68 OxAA 0x44 etc. Ox7E | 0x55 | 0x44 


OxO0FF 













HMASK OxFFFF HMASK 







HADDR1 OxAA68 HADDR1 OxXX55 
HADDR2 OxFFFF HADDR2 OxXX55 
HADDR3 OxAA68 HADDR3 OxXX55 






HADDR4 OxAA68 HADDR4 OxXX55 


Recognizes one 16-bit address (HADDR1) and Recognizes a single 8-bit address (HADDR1) 
the 16-bit broadcast address (HADDR2) 


Figure 23-2. HDLC Address Recognition 





23.5 Programming the SCC HDLC Controller 


HDLC mode is selected for an SCC by writing GSMR_L[MODE] = 0b0000. The HDLC 
controller uses the same buffer and BD data structure as other modes and supports 
multibuffer operation and address comparisons. Receive errors are reported through the 
RxBD; transmit errors are reported through the TxBD. 


23.6 SCC HDLC Commands 


The transmit and receive commands are issued to the CPM command register (CPCR). 
Transmit commands are described in Table 23-2. 


Table 23-2. Transmit Commands 


STOP After a hardware or software reset and a channel is enabled in the GSMR, the transmitter starts polling 
| TRANSMIT the first BD in the TxBD table every 64 Tx clocks, or immediately if TODR[TOD] = 1, and begins sending 
data if TxBD[R] is set. If the SCC receives the STOP TRANSMIT command while not transmitting, the 
transmitter stops polling the BDs. If the SCC receives the command during transmission, transmission is 
aborted after a maximum of 64 additional bits, the Tx FIFO is flushed, and the current BD pointer TBPTR 
is not advanced (no new BD is accessed). The transmitter then sends an abort sequence (0x7F) and 
stops polling the BDs. 

When not transmitting, the channel sends flags or idles as programmed in the GSMR. 

Note that if PSMR[MFF] = 1, multiple small frames could be flushed from the Tx FIFO; a GRACEFUL STOP 
TRANSMIT command prevents this. 


























GRACEFUL 
STOP 
TRANSMIT 


Stops transmission smoothly. Unlike a STOP TRANSMIT command, it stops transmission after the current 
frame is finished or immediately if no frame is being sent. SCCE[GRA] is set when transmission stops. 
HDLC Tx parameters and Tx BDs can then be updated. TBPTR points to the next TxBD. Transmission 

begins once TxBD[R] of the next BD is set and a RESTART TRANSMIT Command is issued. 












Enables frames to be sent on the transmit channel. The HDLC controller expects this command after a 
STOP TRANSMIT is issued and the channel in its GSMR is disabled, after a GRACEFUL STOP TRANSMIT 
command, or after a transmitter error. The transmitter resumes from the current BD. 


INIT TX Resets the Tx parameters in the parameter RAM. Issue only when the transmitter is disabled. INIT TX AND 
PARAMETERS | RX PARAMETERS resets both Tx and Rx parameters. 






RESTART 
TRANSMIT 
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Receive commands are described in Table 23-3. 
Table 23-3. Receive Commands 


ENTER HUNT | After a hardware or software reset, once an SCC is enabled in the GSMR, the receiver is 
automatically enabled and uses the first BD in the RxBD table. While the SCC is looking for the 
beginning of a frame, that SCC is in hunt mode. The ENTER HUNT MODE Command is used to force the 
HDLC receiver to stop receiving the current frame and enter hunt mode, in which the HDLC 
continually scans the input data stream for a flag sequence. After receiving the command, the buffer is 
closed and the CRC is reset. Further frame reception uses the next BD. 













CLOSE RXBD | Should not be used in the HDLC protocol. 


INIT RX Resets the Rx parameters in the parameter RAM.; issue only when the receiver is disabled. Note that 
PARAMETERS | INIT TX AND RX PARAMETERS resets both Tx and Rx parameters. 


23./ Handling Errors in the SCC HDLC Controller 


The SCC HDLC controller reports frame reception and transmission errors using BDs, 
error counters, and the SCCE. Transmission errors are described in Table 23-4. 






Table 23-4. Transmit Errors 
Description 
Transmitter | The channel stops transmitting, closes the buffer, sets TxBD[UN], and generates a TXE interrupt if not 


Underrun masked. Transmission resumes when a RESTART TRANSMIT Command is issued. The SCC2 send and 
receive FIFOs are 32 bytes each; the USB and SCC3 FIFOs are 16 bytes each. 


CTS Lost The channel stops transmitting, closes the buffer, sets TxBD[CT], and generates the TXE interrupt if 


during Frame | not masked. Transmission resumes after a RESTART TRANSMIT Command. If this error occurs on the first 

Transmission | or second buffer of the frame and PSMR[RTE] = 1, the channel resends the frame when CTS is 
reasserted and no error is reported. If collisions are possible, to ensure proper retransmission of 
multi-buffer frames, the first two buffers of each frame should in total contain more than 36 bytes for 
SCC2 or 20 bytes for SCC3. The channel also increments the retransmission counter RETRC in the 
parameter RAM. 





Reception errors are described in Table 23-5. 
Table 23-5. Receive Errors 


| Error Description 


Overrun Each SCC maintains an internal FIFO for receiving data. The CPM begins programming the SDMA 
channel (if the buffer is in external memory) and updating the CRC when a full or partial FIFO’s worth 
of data (according to GSMR_H[RFW)) is received in the Rx FIFO. When an Rx FIFO overrun occurs, 
the previous byte is overwritten by the next byte. The previous data byte and the frame status are lost. 

| The channel closes the buffer with RXxBD[OV] set and generates an RXF interrupt if not masked. The 
receiver then enters hunt mode. Even if an overrun occurs during a frame whose address is not 
recognized, an RxBD with data length two is opened to report the overrun and the interrupt is 
generated. 


CD Lost Highest priority error. The channel stops frame reception, closes the buffer, sets RxBD[CD], and 
during Frame | generates the RXF interrupt if not masked. The rest of the frame is lost and other errors are not 
Reception checked in that frame. At this point, the receiver enters hunt mode. 
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Table 23-5. Receive Errors (Continued) 


es 


Occurs when seven or more consecutive ones are received. When this occurs while receiving a frame, 
the channel closes the buffer, sets RxBD[AB] and generates a maskable RXF interrupt. The channel 
also increments the abort sequence counter ABTSC. The CRC and nonoctet error status conditions 
are not checked on aborted frames. The receiver then enters hunt mode. 


Nonoctet The channel writes the received data to the buffer, closes the buffer, sets RxBD[NO], and generates a 

Aligned maskable RXF interrupt. CRC error status should be disregarded on nonoctet frames. After a nonoctet 

Frame aligned frame is received, the receiver enters hunt mode. An immediate back-to-back frame is still 
received. The nonoctet data may be derived from the last word in the buffer as follows: 


msb Isb 


0 





Valid Data Nonvalid Data 


SaaanAAAAAsAAAMAKARAMOARDAARARIADS IRAAAABAARADIADDARIDOD ASAE BAAAARABAPABAPAERLDDABEDLDIDEOLIEODODODSDEDEASPDPDLDILISODEDODLIEDEPDODESDSIDODLDEDEDEDEODIEPEEDSDOLIIDPDEDIS IDOISIIDOISDIIDSILODODEIDILDSIEIEIDIDLIDLDILISDDDIEOUDDIENGIEIPLILIDADLEDDISLDENIIDIEIDSOLDLILEDEDEDEDIDDIDIIIEDEDIPEIEODEDS SAE semananrnncane sap rebinnreenes 


Note that if buffer swapping is used (RFCR[BO] = Ob0x), the figure above refers to the last byte, rather 
than the last word, of the buffer. The Isb of each octet is sent first while the msb of the CRC is sent first. 


The channel writes the received CRC to the buffer, closes the buffer, sets RxBD[CR], generates a 
maskable RXF interrupt, and increments the CRC error counter CRCEC. After receiving a frame with 
a CRC error, the receiver enters hunt mode. An immediate back-to-back frame is still received. CRC 
checking cannot be disabled, but the CRC error can be ignored if checking is not required. 





23.8 HDLC Mode Register (PSMR) 


The protocol-specific mode register (PSMR), shown in Figure 23-3, functions as the HDLC 
mode register. 


Por | ono [are] — [se] onr ous [orn [mer 


R/wW 
0xA28 (PSMR2), 0xA48 (PSMR3) 
Figure 23-3. HDLC Mode Register (PSMR) 





Table 23-6 describes PSMR HDLC fields. 
Table 23-6. PSMR HDLC Field Descriptions 


Number of flags. Minimum number of flags between or before frames. If NOF = 0b0000, no flags are 
inserted between frames and the closing flag of one frame is followed by the opening flag of the next 
frame in the case of back-to-back frames. NOF can be modified on-the-fly. 






CRC selection. : 
00 16-bit CCITT-CRC (HDLC). X16 + X12 + X5+1. 
x1 Reserved. | - : 
10 32-bit CCITT-CRC (Ethernet and HDLC). X32 + X26 + X23 + X22 + X164+ X12 +X11+X10+ X8 + 
X7 + X5 + X4 4+ X2 + X1 +71. 
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Table 23-6. PSMR HDLC Field Descriptions (Continued) 


a 


Retransmit enable. 

O No retransmission. 

1 Automatic frame retransmission is enabled. Particularly useful in the HDLC bus protocol and ISDN 
applications where multiple HDLC controllers can collide. Note that retransmission occurs only if a 
lost CTS occurs on the first or second buffer of the frame. 


Flag sharing enable. Valid only if GSMR _H[RTSM] = = 1. Can be modified on-the-fly. 

0 Normal operation. 

1 If NOF[O—3] = Ob0000, a single shared flag is sent between back-to-back frames. Other values of 
NOF[0-—3] are decremented by 1. Useful in signaling system #7 applications. 


Disable receiver while transmitting. 

0 Normal operation. 

1 As the SCC sends data, the receiver is disabled and gated by the internal RTS. This helps if the 
HDLC channel is on a multidrop line and the SCC does not need to receive its own transmission. 


HDLC bus mode. 
0 Normal HDLC operation. 
1 HDLC bus operation is selected. See Section 23.14, “HDLC Bus Mode with Collision Detection.” 


HDLC bus RTS mode. Valid only if BUS = 1. Otherwise, it is ignored. 

0 Normal RTS operation during HDLC bus mode. RTS is asserted on the first bit of the Tx frame and 
negated after the first collision bit is received. 

1 Special RTS operation during HDLC bus mode. RTS is delayed by one bit with respect to the 
normal case, which helps when the HDLC bus protocol is being run locally and sent over a 
long-distance line at the same time. The one-bit delay allows RTS to be used to enable the 
transmission line buffers so that the electrical effects of collisions are not sent over the transmission 
line. 


Multiple frames in Tx FIFO. The receiver is not affected. 

O Normal operation. The Tx FIFO must never contain more than one HDLC frame. The CTS lost 
status is reported accurately on a per-frame basis. | 

1 The Tx FIFO can hold multiple frames, but lost CTS may not be reported on the buffer/frame it 
occurred on. This can improve performance of HDLC transmissions of small back-to-back frames or 
when the number of flags between frames should be limited. 





23.9 SCC HDLC Receive Buffer Descriptor (RxBD) 


The CPM uses the RxBD, shown in Figure 23-4, to report on data received for each buffer. 


| Data Length 


Rx Buffer Pointer 





Figure 23-4. SCC HDLC Receive Buffer Descriptor (RxBD) 
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Table 23-7 describes HDLC RxBD status and control fields. 
Table 23-7. SCC HDLC RxBD Status and Control Field Descriptions 


Ea 


Empty. 

O The buffer is full or reception stopped because of an error. The core can read or write to any fields of 
this RxBD. The CPM does not use this BD while E = 0. 

1 The buffer is not full. The CP controls the BD and buffer. The core should not update the BD. 


Reserved, should be cleared. 





Wrap (last BD in the RxBD table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM receives incoming data using the BD pointed 
to by RBASE. The number of BDs in this table are programmable and determined only by RxBD[W] 
and overall space constraints of the dual-port RAM. 


Interrupt. 
0 SCCE[RXB] is not set after this buffer is used; SCCE[RXF] is unaffected. 
1 SCCE[RXB] or SCCE[RXF] is set when the SCC uses this buffer. 


Last buffer in frame. 

0 Not the last buffer in frame. 

1 Last buffer in frame. indicates reception of a closing flag or an error, in which case one or more of the 
CD, OV, AB, and LG bits are set. The SCC writes the number of frame octets to the data length field. 


First in frame. | 
0 Not the first buffer in a frame. 
1 First buffer in a frame. 


Continuous mode. Note that RxBDJ[E] is cleared if an error occurs during reception, regardless of CM. 

0 Normal operation. 

1 RxBD/[E] is not cleared by the CPM after this BD is closed, allowing the associated buffer to be 
overwritten next time the CPM accesses it. 


Reserved, should be cleared. 


DPLL error. Set when a DPLL error occurs while this buffer is being received. DE is also set due to a 
missing transition when using decoding modes in which a transition is required for every bit. Note that 
when a DPLL error occurs, the frame closes and error checking halts. 


Reserved, should be cleared. 


Rx frame length violation. Set when a frame larger than the maximum defined for this channel is 
recognized. Only the maximum-allowed number of bytes (MFLR) is written to the buffer. This event is 
not reported until the buffer is closed, SCCE[RXF] is set, and the closing flag is received. The total 
number of bytes received between flags is still written to the data length field. 


ro) 


> O mT a | 
= 


Rx nonoctet aligned frame. Set when a received frame contains a number of bits not divisible by eight. 


Rx abort sequence. Set when at least seven consecutive ones are received during frame reception. 


Rx CRC error. Set when a frame contains a CRC error. CRC bytes received are always written to the 
| Rx buffer. 


V Overrun. Set when a receiver overrun occurs during frame reception. 


Carrier detect lost (NMSI mode only). Set when CD is negated during frame reception. 


w 


0 


ms) 





wowk, wk. —_ ys wok ) —_k ; NN Ol aay (ee) 
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Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).”’ Because HDLC is a frame-based protocol, RxBD[Data Length] of the 
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last buffer of a frame contains the total number of frame bytes, including the 2 or 4 bytes 
for CRC. Figure 23-5 shows an example of how RxBDs are used in receiving. 


Address 2 


Buffer Full Control Byte 8 Bytes 
5 


Receive BD 0 | MRBLR = 8 Bytes for this SCC 
E . L F : Buffer 
sans [ol [o]s] pes 













0x0008 








Pointer -32-Bit Buffer Pointer 










































Information 
(Il-Field) Bytes . 
Receive BD 1 = : 
E L F . Buffer 
Status 
Length 0x000B CRC Byte 1 
Pointer 32-Bit Buffer Pointer Buffer Closed CRC Byte 2 8 Bytes 
when Closing Flag . 
Received 
Receive BD 2 
E LF AB Bute 


Status 
Length 





Abort was. 
Received after 
Control Byte 


Pointer 







Receive BD 3 


E Buffer 


Status | 
~ Length XXXX 








. 8 Bytes 
Pointer 32-Bit Buffer Pointer _ Buffer 
Still Empty 





Stored in Rx Buffer 


| Stored in Rx Buffer | 










FLAVA eC} Tipit iy i]t jerjcr] t } tine it Aboriide 
Two Frames | 
Received in HDLC 
a acacia Pu 


Legend: Closing Flag 
F = Flag oh 
A = Address Byte 
C = Control Byte 
| = Information Byte 
CR = CRC Byte 


Figure 23-5. SCC HDLC Receiving using RxBDs 
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23.10 SCC HDLC Transmit Buffer Descriptor (TxBD) 


The CPM uses the TxBD, shown in Figure 23-6, to confirm transmissions and indicate error 
conditions. 


retete tre fete) fem 


Data Length 


Tx Buffer Pointer 





Figure 23-6. SCC HDLC Transmit Buffer Descriptor (TxBD) 


Table 23-8 describes HDLC TxBD status and control fields. 
Table 23-8. SCC HDLC TxBD Status and Control Field Descriptions 


0 The butfer i is not ready for transmission. Both the buffer and the BD can be updated. The CPM 
clears R after the buffer is sent or an error is encountered. 
11 The buffer has not peel sent or is being sent and the BD cannot be updated. 


Wrap (last BD in TxBD table). 

O Not the last BD in the table. 

1 Last BD in the BD table. After this buffer is used, the CPM sends data using the BD pointed to by 
TBASE. The number of TxBDs in this table is determined by TxBD[W] and the space constraints of 
the dual-port RAM. 


Interrupt. 
O No interrupt is generated after this buffer is processed. 
1 SCCE[TXB] or SCCE[TXE] is set when this buffer is processed, causing interrupts if not masked. 


O Not the last buffer in the frame. 
1 Last buffer in the frame. 


Tx CRC. Valid only when TxBD[L] = 1. Otherwise, it is ignored. 

O Transmit the closing flag after the last data byte. This setting can be used to send a bad CRC after 
the data for testing purposes. 

1 Transmit the CRC sequence after the last data byte. 


Continuous mode. 

0 Normal operation. . 

1 The CP does not clear TxBD[R] after this BD is closed allowing the buffer to be resent the next time 
the CP accesses this BD. However, TxBD[R] is cleared if an error occurs during transmission, 
regardless of CM. 


7-13 |— Reserved, should be cleared. 
cea Underrun. Set after the SCC sends a buffer and a transmitter underrun occurred. 


CTS lost. Indicates when CTS in NMSI mode or layer 1 grant is lost in GCI or IDL mode during frame 
transmission. If data from more than one buffer is currently in the FIFO when this error occurs, the 
HDLC writes CT in the current BD after sending the buffer. 
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The data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).” 


23.11 HDLC Event Register de aad Mask 
Register (SCCM) 


The SCC event register (SCCE) is used as the HDLC event register to report events 
recognized by the HDLC channel and to generate interrupts. When an event is recognized, 
the SCC sets the corresponding SCCE bit. Interrupts generated through SCCE can be 
masked in the SCC mask register (SCCM) which has the same bit format as the SCCE. 
Setting an SCCM bit enables the corresponding interrupt; clearing a bit masks it. SCCE bits 
are cleared by writing ones; writing zeros has no effect. All unmasked bits must be cleared 
before the CPM clears the internal interrupt request. Figure 23-7 shows SCCE/SCCM for 
HDLC operation. 


re Tol Tete [* [sete [fe lo[nfalalay a 
[rea | = Jasn[arr/occ|ne| fora] — [ee] ar esr [pe 


0000_0000_0000_0000 


a RW 
0xA30 (SCCE2)/0xA34 (SCCM2); 0xA50 (SCCE3)/0xA54 (SCCM3) 
Figure 23-7. HDLC Event Register (SCCE)/HDLC Mask Register (SCCM) 





Table 23-9 describes SCCE/SCCM fields. 
Table 23-9. SCCE/SCCM Field Descriptions 


a 
jo-2 |- Reserved, should be cleared. 


3,4 |GLR/G | Glitch on Rx/Tx. Set when the SCC detects a clock glitch on the receive/transmit clock. See 
LT Section 21.4.6, “Clock Glitch Detection.” 


DPLL carrier sense changed. Set when the carrier sense status generated by the DPLL changes. 
Real-time status can be read in SCCS[CS]. This is not the CD status reported in port C. Valid only 
when the DPLL is used. 
Flag status. Set when the SCC stops or starts receiving HDLC flags. Real-time status can be read in 
SCCS[FG]. 


IDL Idle sequence status changed. Set when HDLC line status changes. Real-time status of the line can 
be read in SCCS[ID]. 

GRA Graceful stop complete. A GRACEFUL STOP TRANSMIT command completed execution. Set as soon as 
the transmitter has sent a frame in progress when the command was issued. Set immediately if no 
frame was in progress when the command was issued. 

= Reserved, should be cleared. 
TXE Tx error. Indicates an error (CTS lost or underrun) has occurred on the transmitter channel. 


—10 
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Table 23-9. SCCE/SCCM Field Descriptions (Continued) 


a) 


Rx frame. Set when the number of receive frames specified in RFTHR are received on the HDLC 


channel. It is set no sooner than two clocks after the last bit of the closing flag is received. This event is 
not maskable via the RxBD{[I] bit. 


Busy condition. Indicates a frame arrived but was discarded due to a lack of buffers. 


14 TXB Transmit buffer. Enabled by setting TxBD[I]. TXB is set when a buffer is sent on the HDLC channel. For 
the last buffer in the frame, TXB is not set before the last bit of the closing flag begins its transmission; 
| | otherwise, it is set after the last byte of the buffer is written to the Tx FIFO. 


15 RXB Receive buffer. Enabled by setting RxBD[I]. RXB is set wnen the HDLC channel receives a buffer that 
is not the last in a frame. | 


Figure 23-8 shows interrupts that can be generated using the HDLC protocol. 





Frame 
Received by HDLC 


Time ———> 


aa 
RXD Line Idle PFJ F{aA};alc}t{ i]t fortcr| F | A Line Idle 
A 


CD 
cD 





Stored in Rx Buffer | 














HDLC SCCE 
Events 


IDL FLG LG RXB RXF FLG IDL CD 
FLG 
NOTES: 
. RXB event assumes receive buffers are 6 bytes each. 
. The second IDL event occurs after 15 ones are received in a row. 
. The FLG interrupts show the beginning and end of flag reception. 
. The FLG interrupt at the end of the frame may precede the RXF interrupt due to receive FIFO latency. 
. The CD event must be programmed in the port C parallel I/O, not in the SCC itself. 
. F = flag, A = address byte, C = control byte, | = information byte, and CR = CRC byte 


OnahoONnM— 


Frame Stored in Tx Buffer 
Transmitted by HDLC 


TXD Line Idle [Fl Fl ala|c orca] F | Line Idle 
} A 





HDLC SCCE ia t 
Events CTS TXB CTS 
NOTES: 


1. TXB event shown assumes all three bytes were put into a single buffer. 
2. Example shows one additional opening flag. This is programmable. 
3. The CTS event must be programmed in the port C parallel I/O, not in the SCC itself. 


Figure 23-8. SCC HDLC Interrupt Event Example 
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23.12 SCC HDLC Status Register (SCCS) 


The SCC status register (SCCS), shown in Figure 23-9, permits monitoring of real-time 
status conditions on RXD. The real-time status of CTS and CD are part of the port C 
parallel [/O. | 


0000_0000 
0xA37 (SCCS2), 0xA57 (SCCS3) 


Figure 23-9. SCC HDLC Status Register (SCCS) 


a re Se oe ee 





Table 23-10 describes HDLC SCCS fields. 
Table 23-10. HDLC SCCS Field Descriptions 


Name] serpin 
Reserved, should be cleared. 


Flags. The line is checked after the data has been decoded by the DPLL. 

0 HDLC flags are not being received. The most recently received 8 bits are examined every bit time to 
see if a flag is present. 

1 HDLC flags are being received. FG is set as soon as an HDLC flag (Ox7E) is received on the line. 
Once it is set, it remains set at least 8 bit times and the next eight received bits are examined. If 
another flag occurs, FG stays set for at least another eight bits. If not, it is cleared and the search 
begins again. 


Carrier sense (DPLL). Shows the real-time carrier sense of the line as determined by the DPLL. 
0 The DPLL does not sense a carrier. 
1 The DPLL senses a carrier. 


Idle status. 

0 The line is busy. 

1 Set when RXD is a logic 1 (idle) for 15 or more consecutive bit times. It is cleared after a single logic 
0 is received. 





23.13 SCC HDLC Programming Examples 


The following sections show examples for programming SCCs in HDLC mode. The first 
example uses an external clock. The second example implements Manchester encoding. 
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23.13.1 SCC HDLC Programming Example #1 


The following initialization sequence is for an SCC HDLC channel with an external clock. 
SCC72 is used with RTS2, CTS2, and CD2 active; CLK3 is used for both the HDLC receiver 
and transmitter. 











1. Configure the port A pins to enable TXD2 and RXD2. Set PAPAR[12,13] and clear 
PADIR[12,13] and PAODR[12,13]. | 


2. Configure the port C pins to enable RTS2, CTS2, and CD2. Set PCPAR[14] clear 
PCPAR[8 ,9] and PCDIR[8 9,14] and set PCSO[8,9]. 


3. Configure the port A pins to enable the CLK3 pin. Set PAPAR[5] and clear 
PADIR[5]. 


4. Connect CLK3 to SCC2 using the SI. Write 0b110 to SICR[R2CS] and 
SICR[T2CS]. | 


5. Connect the SCC2 to the NMSI (its own set of pins) and clear SICR[SC2]. | 
6. Write 0x0001 to the SDCR to initialize the SDMA configuration register. 


7. Write RBASE and TBASE in the SCC2 parameter RAM to point to the RxBD and 
TxBD tables in dual-port RAM. Assuming one RxBD at the start of dual-port RAM 
and one TxBD following it, write RBASE with 0x0000 and TBASE with 0x0008. 


8. Write 0x0041 to CPCR to execute the INIT RX AND TX PARAMS command for SCC2. 
This command updates RBPTR and TBPTR of the serial channel with the new 
values of RBASE and TBASE. 


9. Write RFCR with 0x10 and TFCR with 0x10 for normal operation. 


10. Write MRBLR with the maximum number of bytes per Rx buffer. Choose 256 bytes 
(MRBLR = 0x0100) so an entire Rx frame can fit in one buffer. 


11. Write C_MASK with OxOOOOFOB8 to comply with 16-bit CCITT-CRC. 
12. Write C_PRES with OxOOOOFFFF to comply with 16-bit CCITT-CRC. 
13.Clear DISFC, CRCEC, ABTSC, NMARC, and RETRC for clarity. 

14. Write MFLR with 0x0100 so the maximum frame size is 256 bytes. 

15. Write RFTHR with 0x0001 to allow interrupts after each frame. 

16. Write HMASK with 0x0000 to allow all addresses to be recognized. 
17.Clear HADDR1—HADDR4 for clarity. 


18. Initialize the RxBD. Assume the buffer is at OxO000_1000 in main memory. 
RxBD[Status and Control]= 0xB000, RxBD[Data Length] = 0x0000 (not required), 
and RxBD[Buffer Pointer] = 0x0000_1000. - . 


19. Initialize the TxBD. Assume the Tx data frame is at OxO000_2000 in main memory 
and contains five 8-bit characters. TxBD[Status and Control] = OxBCOO, 
TxBD [Data Length] = 0x0005, and TxBD[Buffer Pointer] = 0xO0000_2000. 


20. Write OXFFFF to SCCE to clear any previous events. 
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21.Write 0x001A to SCCM to allow TXE, RXF, and TXB interrupts. 


22.Write 0x2000_0000 to the CPM interrupt mask register (CIMR) to allow SCC2 to 
generate a system interrupt. The CICR should also be initialized. 


23.Write 0x0000_0000 to GSMR_H2 to enable normal CTS and CD behavior with 
idles (not flags) between frames. 


24. Write 0x0000_0000 to GSMR_L2 to configure CTS and CD to control transmission 
and reception in HDLC mode. Normal Tx clock operation is used. Notice that the 
transmitter (ENT) and receiver (ENR) have not been enabled. If inverted HDLC 
operation 1s preferred, set RINV and TINV. 


25.Write 0x0000 to PSMR2 to configure one opening and one closing Gar 16-bit 
CCITT-CRC, and prevent multiple frames in the FIFO. 


26. Write 0x00000030 to GSMR_L2 to enable the SCC2 transmitter and receiver. This 
additional write ensures that ENT and ENR are enabled last. 


Note that after 5 bytes and CRC have been sent, the Tx buffer 1s closed; the Rx buffer is 
closed after a frame is received. Frames larger than 256 bytes cause a busy (out-of-buffers) 
condition because only one RxBD is prepared. 


23.13.2 SCC HDLC Programming Example #2 


The following sequence initializes an HDLC channel that uses the DPLL in a Manchester 
encoding. Provide a clock which is 16x the chosen bit rate of CLK3. Then connect CLK3 
to the HDLC transmitter and receiver. (A baud rate generator could be used instead.) 
Configure SCC2 to use RTS2, CTS2, and CD2. 








1. Follow steps 1-23 in example #1 above. 


2. Write 0x004A_A400 to GSMR_L2 to make carrier sense always active, a 16-bit 
preamble of ‘01’ patterns, 16x operation of the DPLL and Manchester encoding for 
the receiver and transmitter, and HDLC mode. CTS and CD should be configured to 
control transmission and reception. Do not set GSMR[ENT, ENR]. 


3. Write 0x0000 to PSMR2 to use one opening and one closing flag and 16-bit 
CCITT-CRC and to reject multiple frames in the FIFO. 


4, Write 0x004A_A430 to GSMR_L2 to enable the scc2 transmitter and receiver. 
This additional write to GSMR_L2 ensures that ENT and ENR are enabled last. 


23.14 HDLC Bus Mode with Collision Detection 


The HDLC controller includes an option for hardware collision detection and 
retransmission on an open-drain connected HDLC bus, referred to as HDLC bus mode. 
Most HDLC-based controllers provide only point-to-point communications; however, the 
HDLC bus enhancement allows implementation of an HDLC-based LAN and other 
point-to-multipoint configurations. The HDLC bus is based on techniques used in the 
CCITT ISDN 1.430 and ANSI T1.605 standards for D-channel point-to-multipoint 
operation over the S/T interface. However, the HDLC bus does not fully comply with 1.430 
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or T1.605 and cannot replace devices that implement these protocols. Instead, it is more 
suited to non-ISDN LAN and point-to-multipoint configurations. 


Review the basic features of the I.430 and T1.605 before learning about the HDLC bus. The 
1.430 and T1.605 define a way to connect eight terminals over the D-channel of the S/T 
ISDN bus. The layer 2 protocol is a variant of HDLC, called LAPD. However, at layer 1, a 
method is provided to allow the eight terminals to send frames to the switch through the 
physical S/T bus. 


To determine whether a channel is clear, the S/T interface device looks at an echo bit on the 
line designed to echo the last bit sent on the D channel. Depending on the class of terminal 
and the context, an S/T interface device waits for 7-10 ones on the echo bit before letting 
the LAPD frame begin transmission, after which the S/T interface monitors transmitted 
data. As long as the echo bit matches the sent data, transmission continues. If the echo bit 
is ever O when the transmit bit is 1, a collision occurs between terminals; the station(s) that 
sent a zero stops transmitting. The station that sent a 1 continues as normal. 


The 1.430 and T1.605 standards provide a physical layer protocol that allows multiple 
terminals to share one physical connection. These protocols handle collisions efficiently 
because one station can always complete its transmission, at which point, it lowers its own 
priority to give other devices fair access to the physical connection. | 

The HDLC bus differs from the I.430 and T1.605 standards as follows: 


e The HDLC bus uses a separate input signal rather than the echo bit to monitor data; 
the transmitted data is simply connected to the CTS input. 


e The HDLC bus is a synchronous, digital open-drain connection for short-distance 
configurations, rather than the more complex S/T interface. 


e Any HDLC-based frame protocol can be used at layer 2, not just LAPD. 
e HDLC bus devices wait 8-10 rather than 7—10 bit times before transmitting. (HDLC 
bus has only one class.) 
The collision-detection mechanism supports only: 
e NRZ-encoded data 
e Acommon synchronous clock for all receivers and transmitters 
e Non-inverted data (GSMR[RINV, TINV] = 0) 
e Open-drain connection with no external transceivers 
Figure 23-10 shows the most common HDLC bus LAN configuration, a multimaster 


configuration. A station can transfer data to or from any other LAN station. Transmissions 
are half-duplex, which is typical in LANs. 
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HDLC Bus LAN 












RXD TXD CTS RXD TXD CTS RXD TXD CTS 









HDLC Bus 
Controller 
C 






HDLC Bus 
Controller 
A 





HDLC Bus 
Controller 
B 






RCLK/TCLK RCLK/TCLK RCLK/TCLK 








Clock 
Master Master Master 
NOTES: 
1. Transceivers may be used to extend the LAN size. 


2. The TXD pins of slave devices should be configured to open-drain in the port C parallel I/O port. 
3. Clock is a common RCLK/TCLK for all stations. 


Figure 23-10. Typical HDLC Bus Multimaster Configuration 


In single-master configuration, a master station transmits to any slave station without 
collisions. Slaves communicate only with the master, but can experience collisions in their 
access over the bus. In this configuration, a slave that communicates with another slave 
must first transmit its data to the master, where the data is buffered in RAM and then resent 
to the other slave. The benefit of this configuration, however, is that full-duplex operation 
can be obtained. In a point-to-multipoint environment, this is the preferred configuration. 
Figure 23-11 shows the single-master configuration. 
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HDLC Bus LAN iz 

















RXD TXD RXD TXD CTS RXD TXD CTS 
HDLC HDLC Bus HDLC Bus 
Controller Controller Controller 
A B C 
RCLK  TCLK RCLK TCLK RCLK TCLK 
Clock1 
Clock2 
Master Slave Slave 
NOTES: 


1. Transceivers may be used to extend the LAN size. 

2. The TXD pins of slave devices should be configured to open-drain in the port C parallel I/O port. 
3. Clock1 is the master RCLK and the slave TCLK. 

4. Clock2 is the master TCLK and the slave RCLK. 


Figure 23-11. Typical HDLC Bus Single-Master Configuration 


23.14.1 HDLC Bus Features 

The main features of the HDLC bus are as follows: 
e Superset of the HDLC controller features 
e Automatic HDLC bus access 
e Automatic retransmission in case of collision 
e May be used with the NMSI or a TDM bus 
¢ Delayed RTS mode 


23.14.2 Accessing the HDLC Bus 


The HDLC bus protocol ensures orderly bus control when multiple transmitters attempt 
simultaneous access. The transmitter sending a zero bit at the time of collision completes 
the transmission. If a station sends out an opening flag (Ox7E) while another station is 
already sending, the collision is always detected within the first byte, because the 
transmission in progress is using zero bit insertion to prevent flag imitation. 


While in the active condition (ready to transmit), the HDLC bus controller monitors the bus 
using CTS. It counts the one bits on CTS. When eight consecutive ones are counted, the 
HDLC bus controller starts transmitting on the line; if a zero is detected, the internal 
counter is cleared. During transmission, data is continuously compared with the external 
bus using CTS. CTS is sampled halfway through the bit time using the rising edge of the 
Tx clock. If the transmitted bit matches the received CTS bus sample, transmission 
continues. However, if the received CTS sample is 0 and the transmitted bit is 1, 
transmission stops after that bit and waits for an idle line before attempting retransmission. 
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Since the HDLC bus uses a wired-OR scheme, a transmitted zero has priority over a 
transmitted 1. Figure 23-12 shows how CTS is used to detect collisions. 


TCLK 


TXD | y 
(Output) ee 


ai 
a poe 
ina {| 


CTS sampled at halfway point. 
Collision detected when 
TXD=1, but CTS=0. 


Figure 23-12. Detecting an HDLC Bus Collision 


If both the destination address and source address are included ‘in the HDLC frame, then a 
predefined priority of stations results; if two stations begin to transmit simultaneously, they 
necessarily detect a collision no later than the end of the source address. 


The HDLC bus priority mechanism ensures that stations share the bus equally. To minimize 
idle time between messages, a station normally waits for eight one bits on the line before 
attempting transmission. After successfully sending a frame, a station waits for 10 rather 
than eight consecutive one bits before attempting another transmission. This mechanism 
ensures that another station waiting to transmit acquires the bus before a station can 
transmit twice. When a low priority station detects 10 consecutive ones, it tries to transmit; 
if it fails, it reinstates the high priority of waiting for only eight ones. 


23.14.3 Increasing Performance 


Because it uses a wired-OR configuration, HDLC bus performance is limited by the rise 
time of the one bit. To increase performance, give the one bit more rise time by using a 
clock that is low longer than it is high, as shown in Figure 23-13. 
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ut | a ae 
(Output) ‘ | 
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Collision detected when 


TXD=1, but CTS=0. 


Figure 23-13. Nonsymmetrical Tx Clock Duty Cycle for Increased Performance 
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23.14.4 Delayed RTS Mode 


Figure 23-14 shows local HDLC bus controllers using a standard transmission line and a 
local bus. The controllers do not communicate with each other but with a station on the 
transmission line; yet the HDLC bus protocol controls access to the transmission line. 
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NOTES: 
1. The TXD pins of slave devices should be configured to open-drain in the port C parallel !/O port. 
2. The RTS pins of each HDLC bus controller are configured to delayed RTS mode. 


Figure 23-14. HDLC Bus Transmission Line Configuration 





Normally, RTS goes active at the beginning of the opening flag’s first bit. Setting 
PSMR[BRM] delays RTS by one bit, which is useful when the HDLC bus connects 
multiple local stations to a transmission line. If the transmission line driver has a one-bit 
delay, the delayed RTS can be used to enable the output of the line driver. As a result, the 
electrical effects of collisions are isolated locally. Figure 23-15 shows RTS timing. 











Collision 
TCLK 
TXD 1st Bit 2nd Bit 3rd Bit 
CTS 
RTS 








RTS active for 
only 2 bit times 


Figure 23-15. Delayed RTS Mode 
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23.14.5 Using the Time-Slot Assigner (TSA) 


HDLC bus controllers can be used with a time-division multiplexed transmission line and 
a local bus, as shown in Figure 23-16. Local stations use time slots to communicate over 
the TDM transmission line; stations that share a time slot use the HDLC bus protocol to 
control access to the local bus. 














+5V 
Rx Local HDLC Bus | A 
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mel TET 7 tt ttl yt 
Li1RXD L1TXD CTS L1RXD LiTXD CTS Li1RXD L1TXD CTS | LiRXD L1TXD CTS 
HDLC Bus HDLC Bus HDLC Bus HDLC Bus 
Controller Controller Controller Controller 
A B C D 
= : ee : eee eee 
Stations share time-slot n Stations share time-slot m 
NOTES: 


1. All TXD pins of slave devices should be configured to open-drain in the port C parallel I/O port. 
2. The TSA in the SI of each station is used to configure the preferred time slot. 
3. The choice of the number of stations to share a time slot is user-defined. It is two in this example. 


Figure 23-16. HDLC Bus TDM Transmission Line Configuration 


The local SCCs in HDLC bus mode communicate only with the transmission line and not 
with each other. The SCCs use the TSA of the serial interface, receiving and sending data 
over LITXDx and LIRXDx. Because collisions are still detected from the individual SCC 
CTS pin, it must be configured in port C to connect to the chosen SCC. Because the SCC 
only receives clocks during its time slot, CTS is sampled only during the Tx clock edges of 
the particular SCC time slot. 


23.14.6 HDLC Bus Protocol Programming 


The HDLC bus on the MPC850 is implemented using the SCC in HDLC mode with 
bus-specific options selected in the PSMR and GSMR, as outlined below. See also 
Section 23.5, “Programming the SCC HDLC Controller.” 


23.14.6.1 Programming GSMR and PSMR for the HDLC Bus Protocol 
To program the protocol-specific mode register (PSMR), set the bits as described below: 


e Configure NOF as preferred 
e Set RTE and BUS to 1 
e Set BRM to 1 if delayed RTS is desired 
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e Configure CRC to 16-bit CRC CCITT (Ob00). 


e Configure other bits to zero or default. 
To program the general SCC mode register (GSMR), set the bits as described below: 


e Set MODE to HDLC mode (Ob0000). 

e Configure CTSS to 1 and all other bits to zero or default. 

e Configure the DIAG bits for normal operation (Ob00). 

e Configure RDCR and TDCR for 1x clock (Ob00). 

e Configure TENC and RENC for NRZ (Ob000). 

e Clear RTSM to send idles between frames. 

e Set GSMR_L[ENT, ENR] as the last step to begin operation. 


23.14.6.2 HDLC Bus Controller Programming Example 

Except for the above discussion in Section 23.14.6.1, “Programming GSMR and PSMR for 
the HDLC Bus Protocol,’ use the example in Section 23.13.1, “SCC HDLC Programming 
Example #1.” 
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SCC AppleTalk Mode 


AppleTalk is a set of protocols developed by Apple Computer, Inc. to provide a LAN 
service between Macintosh computers and printers. Although AppleTalk can be 
implemented over a variety of physical and link layers, including Ethernet, AppleTalk 
protocols have been most closely associated with the LocalTalk physical and link-layer 
protocol, an HDLC-based protocol that runs at 230.4 kbps. In this manual, the term 
‘AppleTalk controller’ assumes the support that the MPC850 provides for LocalTalk 
protocol. The AppleTalk controller provides required frame synchronization, bit sequence, 
preamble, and postamble onto standard HDLC frames. These capabilities, as well as the use 
of the HDLC controller in conjunction with DPLL operation in FMO mode, provide the 
proper connection formats to the LocalTalk bus. 


24.1 Operating the LocalTalk Bus 
A LocalTalk frame, shown in Figure 24-1, is basically a modified HDLC frame. 


Sync HDLC Destination] Source Control Closing Abort 
Sequence Flags Address | Address Byte CRC-16 Flag Sequence 


>3bits | 2ormore 1 byte 1 byte 1 byte 0-600 bytes 2 bytes 1byte 12-18 ones 
bytes 





Figure 24-1. LocalTalk Frame Format 


First, a synchronization sequence of more than three bits 1s sent. This sequence consists of 
at least one logical one bit (FMO encoded) followed by two bit times or more of line idle 
with no particular maximum time specified. The idle time allows LocalTalk equipment to 
sense a carrier by detecting a missing clock on the line. The remainder of the frame is a 
typical half-duplex HDLC frame. Two or more flags are sent, allowing bit, byte, and frame 
delineation or detection. Two bytes of address, destination, and source are sent next, 
followed by a byte of control and 0-600 data bytes. Next, two bytes of CRC (the common 
16-bit CRC-CCITT polynomial referenced in the HDLC standard protocol) are sent. The 
LocalTalk frame is then terminated by a flag and a restricted HDLC abort sequence. Then 
the transmitter’s driver is disabled. 
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The control byte within the LocalTalk frame indicates the type of frame. Control byte 
values from 0x01—Ox7F are data frames; control byte values from 0x80—-OxFF are control 
frames. Four control frames are defined: 


e ENQ—Enquiry 
e ACK—Enquiry acknowledgment 
e RTS—Request to send a data frame 


e CTS—Clear to send a data frame 


Frames are sent in groups known as dialogs, which are handled by the software. For 
instance, to transfer a data frame, three frames are sent over the network. An RTS frame 
(not to be confused with the RS-232 RTS pin) is sent to request the network, a CTS frame 
is sent by the destination node, and the data frame is sent by the requesting node. These 
three frames comprise one possible type of dialog. After a dialog begins, other nodes cannot 
start sending until the dialog is complete. Frames within a dialog are sent with a maximum 
interframe gap (IFG) of 200 us. Although the LocalTalk specification does not state it, there 
is also a minimum recommended IFG of 50 us. Dialogs must be separated by a minimum 
interdialog gap (IDG) of 400 us. In general, these gaps are implemented by the software. 


Depending on the protocol, collisions should be encountered only during RTS and ENQ 
frames. Once frame transmission begins, it is fully sent, regardless of whether it collides 
with another frame. ENQ frames are infrequent and are sent only when a node powers up 
and enters the network. A higher-level protocol controls the uniqueness and transmission 
of ENQ frames. | 


In addition to the frame fields, LocalTalk requires that the frame be FMO (differential 
Manchester space) encoded, which requires one level transition on every bit boundary. If 
the value to be encoded is a logical zero, FMO requires a second transition in the middle of 
the bit time. The purpose of FMO encoding is to avoid having to transmit clocking 
information on a separate wire. With FMO, the clocking information is present whenever 
valid data is present. 


24.2 Features 


The following list summarizes the features of the SCC in AppleTalk mode: 


e Superset of the HDLC controller features 

¢ FMO encoding/decoding 

e Programmable transmission of sync sequence 

e Automatic postamble transmission 

e Reception of sync sequence does not cause extra SCCE[DCC] interrupts 
e Reception is automatically disabled while sending a frame 

e Transmit-on-demand feature expedites frames 

e Connects directly to an RS-422 transceiver 
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24.3 Connecting to AppleTalk 


As shown in Figure 24-2, the MPC850 connects to LocalTalk, and, using TXD, RTS, and 
RXD, is an interface for the RS-422 transceiver. The RS-422, in turn, is an interface for the 
LocalTalk connector. Although it is not shown, a passive RC circuit is recommended 
between the transceiver and connector. 
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Figure 24-2. Connecting the MPC850 to LocalTalk 





The 16x overspeed of a 3.686-MHz clock can be generated from an external frequency 
source or from one of the baud rate generators if the resulting output frequency is close to 
a multiple of the 3.686 MHz frequency. The MPC850 asserts RTS throughout the duration 
of the frame so that RTS can be used to enable the RS-422 transmit driver. 


24.4 Programming the SCC in AppleTalk Mode 


The AppleTalk controller is implemented by setting certain bits in the HDLC controller. 
Otherwise, Chapter 23, “SCC HDLC Mode,’ describes how to program the HDLC 
controller. Use GSMR, PSMR, or TODR to program the AppleTalk controller. 


24.4.1 Programming the GSMR 
Program the GSMR as described below: 


1. Set MODE to 0b0010 (AppleTalk). 


2. Set DIAG to 0b00 for normal operation, with CD and CTS grounded or configured 
for parallel I/O. This causes CD and CTS to be internally asserted to the SCC. 


3. Set RDCR and TDCR to (0b10) a 16x clock. 
4. Set the TENC and RENC bits to 0b010 (FMO). 
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5. Clear TEND for default operation. 
6. Set TPP to 0b11 for a preamble pattern of all ones. 


7. Set TPL to Ob000 to transmit the next frame with no synchronization sequence and 

to 001 to transmit the next frame with the LocalTalk synchronization sequence. For 
example, data frames do not require a preceding synchronization sequence. These 
bits may be modified on-the-fly if the AppleTalk protocol 1s selected. 


8. Clear TINV and RINV so data will not be inverted. 
9. Set TSNC to 1.5 bit times (Ob10). 


10.Clear EDGE. Both the positive and negative edges are used to change the sample 
point (default). 


11.Clear RTSM (default). 
12.Set all other bits to zero or default. 
13.Set ENT and ENR as the last step to begin operation. 


24.4.2 Programming the PSMR 
Follow these steps to program the protocol-specific mode register: 
1. Set NOF to 0b0001 giving two flags before frames (one opening flag, plus one 
additional flag). 
2. Set CRC 16-bit CRC-CCITT. 
3. Set DRT. 


4, Set all other bits to zero or default. 


For the PSMR definition, see Section 23.8, “HDLC Mode Register (PSMR).” 


24.4.3 Programming the TODR 


Use the transmit-on-demand (TODR). register to expedite a transmit frame. See 
Section 21.2.4, “Transmit-on-Demand Register (TODR).” 


24.4.4 SCC AppleTalk Programming Example 


Except for the previously discussed register programming, use the example in 
Section 23.13.1, “SCC HDLC Programming Example #1.” 
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SCC Asynchronous HDLC Mode 


Asynchronous HDLC use HDLC framing techniques with UART-type characters. The 
asynchronous HDLC protocol is typically used as the physical layer for point-to-point 
protocol (PPP) and the infrared link access protocol (IrLAP). Although asynchronous 
HDLC can be implemented in conjunction with the core, it is more efficient and less 
computationally intensive to let the CPM handle framing and transparency functions. 


The RFC 1549 octet stuffing/unstuffing provided by this mode supports only asynchronous 
transmission. This mode cannot be used to provide octet stuffing for synchronous 
communication lines. 


25.1 Asynchronous HDLC Features 
The following list summarizes the main features of the SCC in asynchronous HDLC mode: 
e Flexible buffer structure lets all or part of a frame be sent or received | 
e Separate interrupts for received frames and transmitted buffers 
e Automatic CRC generation and checking 
e Support for nonmultiplexed serial interface control signals 
e Automatic generation of opening and closing flags 
e Reception of frames with a single shared flag 


e Automatic generation and stripping of transparency characters according to RFC 
1549 using transmit and receive control character maps 


e Programmable opening flag, closing flag, and control escape characters 
e Automatic transmission of the abort sequence after a STOP TRANSMIT command 


e Automatic transmission of idle characters between frames and between characters 
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25.2 Asynchronous HDLC Frame Transmission 
Processing 


The SCC in asynchronous HDLC mode (asynchronous HDLC controller) works with 
minimal core intervention. When the core enables the transmitter and sets TxBD[R] in the 
first BD of the table, the asynchronous HDLC controller fetches data from memory and 
starts sending the frame. If the current TxBD[L] 1s set (last buffer of a frame), the CRC and 
closing flag are appended. If TxBD[CM] is zero, the transmitter updates frame status bits 
in the BD and clears TxBD[R]. If TxBD[I] is set, the controller sets SCCE[TXB] so an 
interrupt can be generated after each buffer, after a group of buffers, or after each frame is 
sent. 


If TxBD[CM] is set, the asynchronous HDLC transmitter updates frame status bits in the 
BD after transmission but does not clear TxBD[R]. The transmitter then proceeds to the 
next TxBD and if necessary waits until it is ready. As the transmitter sends data, it performs 
the transparency encoding specified by the protocol. See Section 25.4, “Transmitter 
Transparency Encoding.” 


Figure 25-1. Asynchronous HDLC Frame Structure 





To rearrange buffers, such as for error handling or to expedite data ahead of previously 
linked buffers, issue a STOP TRANSMIT command before modifying the TxBD table or 
directly changing the current TxBD pointer TBPTR. When the asynchronous HDLC 
controller receives a STOP TRANSMIT command, it stops the transmission and sends the 
asynchronous HDLC abort sequence. It then sends idle characters until the RESTART 
TRANSMIT command is given, at which point it resumes transmission with the next TxBD. 


25.3 Asynchronous HDLC Frame Reception 
Processing 


The asynchronous HDLC receiver is designed to work with minimal core intervention. It 
can decode transparency characters, check the CRC of the frame, and detect errors on the 
line and in the controller. When the core enables the receiver and the receiver detects a data 
byte of the incoming frame preceded by one or more opening flags, the asynchronous 
HDLC controller fetches the next BD. If RxBDJE] is set, the controller starts transferring 
the incoming frame into the buffer. When the buffer is full, the controller clears RxBDJ[E]. 
If the incoming frame is larger than the buffer, the controller fetches the next BD, and if E 
is set, continues transferring the rest of the frame into its buffer. 


The receiver decodes the transparency character required by asynchronous HDLC protocol 
as described in Section 25.5, “Receiver Transparency Decoding.” When the frame ends, the 
controller checks the incoming CRC field and writes it to the buffer. The controller then 
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updates RxBD[Data Length] with the total frame length, including the CRC bytes. The 
controller sets RxBD[L], writes the frame status bits, and clears RxBD[E] Gf RxBD[CM] 
is zero). It then sets SCCE[RXF], which indicates that a frame was received and is in 
memory. The controller then waits for the start of the next frame, which may or may not 
have an opening flag. 


25.4 Transmitter Transparency Encoding 


The asynchronous HDLC transmitter encodes characters according to RFC 1549, a de facto 
standard of the Internet Engineering Task Force (ETF). It examines outgoing bytes and 
performs the transparency algorithm for the following conditions: 


e The byte is a flag (Ox7E for PPP, OxCO or OxC1 for IrLAP) 
e The byte is a control-escape character (0x7D) 
e The byte value is between 0x00 and 0x1F and the corresponding bit in the Tx control 


character table is set 


When a condition applies, a two-byte sequence is sent instead of the byte. The sequence 
consists of the control-escape character (Ox7D) followed by the original byte 
exclusive-ORed with 0x20. 


25.5 Receiver Transparency Decoding 


The asynchronous HDLC receiver decodes characters according to RFC 1549. To recover 
the original data, it examines incoming data bytes and performs the transparency algorithm 
in the following ways: 


e It discards characters whose corresponding bit is set in the Rx control character map. 
This character is assumed to have been inserted in the character stream by an 
intermediate device and is not part of the original frame. 


e It reverses the transmission transparency sequence by discarding a received 
control-escape character (0x7D) and exclusive-ORing the following byte with 0x20 
before performing the CRC calculation and writing the byte into memory. 


Figure 25-2 shows the algorithm because some cases are not covered by RFC 1549. 
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Figure 25-2. Receive Flowchart 
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25.6 Exceptions to RFC 1549 


e Anunmapped control character that follows 0x7D is modified by the XOR process. 
The CRC check should catch this. 


¢ In addition to the abort sequence, frames are terminated by the following errors: 
— CD (carrier detect) lost 
— Receiver overrun 
— Framing error 
— Break sequence 


e If an invalid sequence(Ox7D7D) is received, the first control escape character is 
discarded, and the second is unconditionally XORed with 0x20. The sequence is 
thus stored in the buffer as Ox5D. 
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25./ Asynchronous HDLC Channel Implementation 


The following points are specific to asynchronous HDLC channel implementation: 


e Flag sequence—The transmitter automatically generates the opening and closing 
flags. The receiver removes opening and closing flags before writing a frame to 
memory and receives frames with only one shared flag between frames, ignoring 
multiple flags. 


e Address field—The address field is neither generated nor examined by the 
microcode while sending or receiving. The destination address field of the frame 
must be included in the Tx buffer. Any address field compression, expansion, or 
checking must be performed by the core. 


e Control field—The control field is neither generated nor examined by the microcode 
during a transfer. The control field of the frame must be included in the buffer. Any 
control field compression, expansion, or checking is done by the core. 


e Frame check sequence— When sending, the frame check sequence (FCS) is 
appended to the frame before the closing flag is sent. The FCS is generated on the 
original frame before transparency characters, start/stop bits, or flags are added. 
When receiving, the FCS is checked automatically and calculated after any 
transparency characters, start/stop bits, and flags are removed. For both, the 
controller uses only a 16-bit CRC-CCITT polynomial. 


e Encoding—The asynchronous HDLC controller supports 8 data bits, one start bit, 
one stop bit, and no parity. Program PSMR[CHLN] to 0b11 for proper operation. 


e Idle characters— When sending, the asynchronous HDLC controller sends idle 
characters when no data is available; when receiving, it ignores idle characters. 


25.8 Asynchronous HDLC Mode Parameter RAM 


For asynchronous HDLC mode, the protocol-specific area of the SCC parameter RAM is 
mapped as in Table 25-1. 


Table 25-1. Asynchronous HDLC-Specific SCC Parameter RAM 
Memory Map 


ortset* Name | width Description 
Ox3C 

Ox3E | 

0x40 

0x42 

0x46 


BOF Beginning-of-flag-character. Initialize to PPP-Ox7E, IrLAP - OxCO. 
ae 
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Table 25-1. Asynchronous HDLC-Specific SCC Parameter RAM 


Memory Map (Continued) 
on[ none [wa 












we [=r fees 
RFTHR Received frames threshold. Number of Rx frames needed to trigger SCCE[RXF] 
0x58 

Ox5A 








TXCTL_TBL Control character tables. Stores the bit array used for the Tx/Rx control characters. 


See Figure 25-3. Each bit corresponds to a character that should be mapped 
Ox54 RXCTL_TBL| Word | according to RFC 1549. If a TXCTL_TBL bit is set, its corresponding character is 
mapped; otherwise, it is not mapped. If an RXCTL_TBL bit is set, its corresponding 
character is discarded if received; otherwise, it is received normally. TXCTL_TBL 
| and RXCTL_TBL should be initialized to zero for IrLAP. 
Hword | Number of opening flags to be sent at the beginning of a frame. A value of n 
pe [ter Pe'|cerersereitaa wn enemomiataneAwtedy 


sa 


1 From SCC base. SCC base = IMMR + 0x3D00 (SCC2) or 0x3E00 (SCC3) 


Figure 25-3 shows bit arrangements for TXCTL_TBL and RXCTL_TBL. 


eT [ets [*[s[e[7[* [=] els [elelele 
fe["[e[s[=[*|#[=[*[=[=|7|~=[=[o[a 
20" a 00 06 |o.00 [oa 0 | 100 [0.07] 05 os | 104 050 | [0 


Figure 25-3. TXCTL_TBL/RXCTL_TBL 














25.9 Configuring GSMR and DSR for Asynchronous 
HDLC 


General SCC parameters can be configured as described in Chapter 21, “Serial 
Communications Controllers,’ except for the following changes: 


25.9.1 General SCC Mode Register (GSMR) 
Table 25-2 shows asynchronous HDLC-specific information for the GSMR. 
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Table 25-2. Asynchronous HDLC-Specific GSMR Field Descriptions 


romp em 


Rx FIFO width (GSMR_H[26]) 

0 Do not use. 

1 Low-latency operation—for character-oriented protocols like UART, BISYNC, and asynchronous HDLC. 
The Rx FIFO is 8 bits wide and the Rx FIFO is one-fourth its normal size (8 bytes for SCC2; 4 bytes for 
SCC 3). This allows each character to be written to the buffer without waiting for 32 bits to be received. 


Tx/Rx divide clock rate (GSMR_L[14—15/16—17]). For asynchronous HDLC mode, 8x, 16x, or 32x must be 
chosen. Set TDCR = RDCR in most applications. 

00 Do not use. 

01 8x clock mode (do not use for IrLAP). 

10 16x clock mode. 

11 32x clock mode (do not use for IrLAP). 





25.9.2 Data Synchronization Register (DSR) 


The data synchronization register (DSR) is reserved in asynchronous HDLC mode. It 
should be left in its reset state of Ox7E7E. 


25.10 Programming the Asynchronous HDLC 
Controller 


Asynchronous HDLC mode is selected for an SCC by writing GSMR_L[MODE] = 
0b0110.The asynchronous HDLC controller uses the same buffer and BD data structure as 
other modes and supports multibuffer operation. Receive errors are reported through the 
RxBD; transmit errors are reported through the TxBD. Status line information (CD and 
CTS) is reported through the port C pins; a maskable interrupt is generated when the status 
of either line changes. 


25.11 Asynchronous HDLC Commands 


The transmit and receive commands are issued to the CP command register (CPCR). 


Transmit commands are described in Table 25-3. After a hardware or software reset and a 
channel is enabled in the GSMR, the transmitter starts polling the first BD in the TxBD 
table every 8 transmit clocks, or immediately if TODR[TOD] = 1, and begins sending data 
if TxBD[R] 1s set. 


Table 25-3. Transmit Commands 


Pewee 


STOP TRANSMIT | Sends the asynchronous HDLC abort sequence (0x7D;0x7E for PPP, 0x7D; OxC1 for irLAP) and 
| disables data transmission. If the asynchronous HDLC controller receives this command during 
frame transmission, the abort sequence is put in the FIFO and the transmitter does not try to send 
more data from the current BD or advance to the next TxBD. The BD to be terminated is indicated by 
the TBPTR entry in the parameter RAM table. 

Note that unlike with other SCC protocols, the STOP TRANSMIT command does not flush the FIFO. Up 
to 16 characters (32 on SCC2) can be sent ahead of the abort sequence unless GSMR_H[TFL] = 1. 

















MOTOROLA Chapter 25. SCC Asynchronous HDLC Mode 25-7 





Part V. The Communications Processor Module 


Table 25-3. Transmit Commands (Continued) = 


GRACEFUL Not supported by the asynchronous HDLC controller. | 
STOP TRANSMIT 


RESTART Reenables transmission of characters; the asynchronous HDLC controller expects it after a STOP 
TRANSMIT TRANSMIT Command or transmitter error. The controller continues sending from the first character in 
the buffer using the current TxBD (pointed to by TBPTR). 




















Initializes all Tx parameters in this channel’s parameter RAM to reset state. It must be issued only 
when the transmitter is disabled. The INIT TX AND RX PARAMETERS Command resets both Tx and Rx 
parameters. 









INIT TX 
PARAMETERS 


Table 25-4 describes receive commands. After hardware or software is reset and a channel 
is enabled in the GSMR, reception begins with the first BD in the RxBD table. 


Table 25-4. Receive Commands 


ENTER HUNT | Forces the asynchronous HDLC controller to close the current RxBD, if it is in use, and enter hunt 
MODE mode. Reception resumes after the controller finds a frame preceded by one or more opening flags. 


CLOSE RXBD | Not supported by the asynchronous HDLC controller. | 

INIT RX Initializes all Rx parameters in the channel’s parameter RAM to reset state. Issue only when the 

PARAMETERS | receiver is disabled. The INIT TX AND RX PARAMETERS command resets both Tx and Rx parameters. 

25.12 Handling Errors in the Asynchronous HDLC 
Controller 


The asynchronous HDLC controller reports frame reception and transmission error 
conditions using the channel BDs and the asynchronous HDLC event register (SCCE). 
Table 25-5 describes transmit errors. | 
















Table 25-5. Transmit Errors 


a 
CTS Lost during The channel stops sending the buffer, closes it, sets SCCE[TXE] and TxBD[CT]. The channel | 
Frame Transmission | resumes sending from the next TxBD after a RESTART TRANSMIT command is issued. 
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Table 25-6 describes reception errors. 


Table 25-6. Receive Errors 


Overrun SCC2 has 32-byte Rx FIFOs; SCC3 has 16-byte Rx FIFOs. Overrun occurs when the CP cannot keep 
up with the data rate or the SDMA channel cannot write the received data to memory. The previous 
data byte and frame status are lost. The controller closes the buffer and sets RxBD[OV] and 
SCCE[RXF]. The receiver then looks for the next frame. 


CD Lost The channel stops receiving frames, closes the buffer, and sets SCCE[RXF] and RxBD[CD]. This error 
during Frame | has highest priority. The rest of the frame is lost and other errors are not checked in that frame. The 
Reception receiver then searches for the next frame once CD is reasserted. 


When an abort sequence (0x7D, 0x7E for PPP; 0x7D, OxC1 for IrLAP) is detected, the channel closes 
the buffer by setting SCCE[RXF] and RxBD[AB]. CRC error status is not checked on aborted frames. 
If no frame is being received, the next BD is opened and then closed with RxBD[AB] set. 


The channel writes the received cyclic redundancy check to the buffer, closes the buffer, and sets 
SCCE[RXF] and RxBD[CR]. After receiving this error, the receiver prepares to receive the next frame. 


Break The receiver detected the first character in a break sequence. The channel closes the buffer and sets 
Sequence SCCE[RXF] and RxBD[BRK]. CRC error status is not checked. SCCE[BRKS] is set when the first 
Received break of a sequence is found; SCCE[BRKE] is set when an idle bit is received after a break sequence. 





25.13 SCC Asynchronous HDLC Registers 


The following sections describe the SCC registers when in asynchronous HDLC mode. 


25.13.1 Asynchronous HDLC Event Register (SCCE)/Asynchronous 
HDLC Mask Register (SCCM) 


The SCC event register (SCCE) is used as the asynchronous HDLC event register to 
generate interrupts and report events recognized by the asynchronous HDLC channel. 
When an event is recognized, the asynchronous HDLC controller sets the corresponding 
SCCE bit. Interrupts can be masked by clearing the appropriate bit in the asynchronous 
HDLC mask register (SCCM). SCCE bits, shown in Figure 25-4, are cleared by writing 
ones — writing zeros has no effect. Unmasked SCCE bits must be cleared before the CPM 
clears the internal interrupt request. 


Ww 
0xA30 (SCCE2)/0xA34 (SCCM2); 0xA50 (SCCE3)/0xA54 (SCCM3) 


Figure 25-4. Asynchronous HDLC Event Register (SCCE)/Asynchronous HDLC 
Mask Register (SCCM) 
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Table 25-7 describes SCCE/SCCM fields. 
Table 25-7. SCCE/SCCM Field Descriptions 







Description 


3 |GLR | Glitch on Rx. Set when the SCC finds a Rx clock glitch. 
GLT | Glitch on Tx. Set when the SCC finds a Tx clock glitch. 
6 )- Reserved, should be cleared. 


IDL Idle sequence status changed. Set when serial line status changes. Real-time status can be read in 
SCCS[ID]. 


a! 
4 nes 
occurs per break sequence, no matter the length of the sequence. 


2 |RXF_ | Rx frame. Set when the number of frames specified in RFTHR are received. RXF is set no sooner than 
when the midpoint of the closing flag’s stop bit arrives. 


13 | Busy condition. Set when a frame is received and discarded due to a buffer shortage. 


TXB_ | Transmit buffer. Set when a buffer with TxBD[I] set is sent on the channel, not before the last bit of the 

















oO 


ae en eee al ey i (ha 
— 
b 


—_ 







closing flag begins its transmission if the buffer is the last one in the frame. Otherwise, TXB is set after 
the last byte of the buffer is written to the Tx FIFO. 


15 |RXB | Rx buffer. Set when a buffer with RxBD[I] set and RxBD[L] cleared is received over the channel. 


25.13.2 SCC Asynchronous HDLC Status Register (SCCS) 


The SCC asynchronous HDLC status register (SCCS), shown in Figure 25-5, monitors the 
real-time status of RXD. The real-time status of CTS and CD is part of the port C parallel 
1/O. 


0000_0000_0000_0000 


0xA37 (SCCS2), 0xA57 (SCCS3) 


Figure 25-5. SCC Status Register for Asynchronous HDLC Mode (SCCS) 
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Table 25-8 describes asynchronous HDLC SCCS fields. 


Table 25-8. Asynchronous HDLC SCCS Field Descriptions 


Reserved, should be cleared. 


Idle status. Set when RXD has been a logic one for at least a full character time. 
0 The line is not idle. 
1 The line is idle. 





25.13.3 Asynchronous HDLC Mode Register (PSMR) 


When the SCC is in asynchronous HDLC mode, the PSMR, shown in Figure 25-6, acts as 
the asynchronous HDLC mode register. 


0xA28 (PSMR2), 0xA48 (PSMR3) 
Figure 25-6. Asynchronous HDLC Mode Register (PSMR) 





Table 25-9 describes PSMR fields. 
Table 25-9. PSMR Field Descriptions 


elem 


Flow control 

0 Normal operation. 

1 Asynchronous flow control. When CTS is negated, the transmitter stops at the end of the current 
character. If CTS remains negated past the middle of the character, the next full character is sent 
before transmission stops. If CTS is reasserted, transmission resumes from where it stopped and no 
CTS lost error is reported. Only idle characters are sent while CTS is negated. 


f= | Reserved, should be cleared. 


CHLN | Character length. On other protocols CHLN is the number of data bits in a character. For asynchronous 

















HDLC mode and IrDA modes, aN must be set to 0b11 (indicating a character length of 8 bits). 


415]— Reserved, should be cleared. 


25.14 SCC Asynchronous HDLC RxBDs 


The CPM uses the RxBD, shown in Figure 25-7, to report on received data. An example of 
the RxBD process is shown in Figure 23-5 of Section 23.9, “SCC HDLC Receive Buffer 
Descriptor (RxBD).’ 
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pe l-|w[t[e[e few] — [ork|sor) - | as | on | ov | co 
Data Length 


Rx Buffer Pointer 





Figure 25-7. SCC Asynchronous HDLC RxBDs 
Table 25-10 describes the SCC asynchronous HDLC RxBD status and control fields. 


Table 25-10. Asynchronous HDLC RxBD Status and Control Field 


Descriptions 








0 The buffer is full or stops receiving because of an error. The core can read or update any fields of 
this RxBD. The CPM cannot reuse this BD while E = 0. | 
1 The buffer is not full. The CP controls the BD and buffer. The core should not update the BD. 


| Reserved, should be cleared. | 


Wrap (last BD in table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM receives incoming data using the BD pointed 
to by RBASE. The number of RxBDs in a table is determined by the W bit and overall space 

constraints of the dual-port RAM. 















Interrupt. 
0 SCCE[RXB] is not set after this buffer is used. SCCE[RXF] is unaffected. 
1 SCCE[RXB] or SCCE[RXF] is set when this buffer is used by the asynchronous HDLC controller. 


| Last in frame. 

0 Not the last buffer in a frame. 

1 Set by SCC when a buffer is the last in a frame which happens when a closing flag or error is 
received. If an error occurs, one or more of the BRK, CD, OV, BOF, CR, and AB bits are set. The 
SCC updates RxBD[Data Length]. 


First in frame. Set by the SCC when this buffer is the first in a frame. 
0 Not the first buffer in a frame. 
1 First buffer in a frame. 


Continuous mode. 

0 Normal operation. 

1 The CP does not clear E after the BD is closed allowing a buffer to be overwritten when the CP next 
accesses the BD. However, E is cleared if an error other than CRC occurs during reception, 
regardless of CM. 


7 Reserved, should be cleared. 
8 [BRK Break character received. Set when a frame is closed because a break character is received. 


BOF Beginning of frame. Set when a frame is closed because a BOF character is received instead of the 
expected EOF. 


10-11 | Reserved, should be cleared. 
Rx abort Sequence: Set when an abort sequence or framing error terminates a frame. 
| Rx ony error. Set when a frame has a CRC error. Received CRC bytes are written to the buffer. 
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Table 25-10. Asynchronous HDLC RxBD Status and Control Field 
Descriptions (Continued) 


| Name Description 
jov | Overrun. Set when a receiver overrun occurs during frame reception. 


Carrier detect lost. Set when CD is negated during frame reception. 


The data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).” Because asynchronous HDLC is a frame-based protocol, Rx BD[Data 
Length] of the last buffer of a frame contains the total number of frame bytes, including the 


2 or 4 bytes for CRC. 







25.15 SCC Asynchronous HDLC TxBDs 


The CPM uses the TxBD, shown in Figure 25-8, to confirm transmissions and indicate error 
conditions. 


ret-[w[+[e[-lwl Ci 


Tx Buffer Pointer 





Figure 25-8. SCC Asynchronous HDLC TxBDs 


Table 25-11 describes the SCC asynchronous HDLC TxBD status and control fields. 
Table 25-11. Asynchronous HDLC TxBD Status and Control Field 
Descriptions 


El 


| Ready. 
0 The buffer is not ready for transmission; the BD and the buffer can be updated. The CPM clears R 
after the buffer is sent or after an error condition. | 
| 1 The buffer is ready but is not sent or is being sent. Do not update the BD while R =1. 


f= | Reserved, should be cleared. 


1 
2 Wrap (last BD in table). 
0 Not the last BD in the table. 
1 The last BD in the table. After this buffer is used, the CPM sends incoming data using the BD 
pointed to by TBASE. The number of TxBDs in this table are determined only by the W bit and overall 


space constraints of the dual-port RAM. 


Interrupt. 
10 SCCE[TXB] is not set after this buffer is sent. 
1 SCCE[TXB] is set when this buffer is sent by the asynchronous HDLC controller. 


Last. 
0 Not the last buffer in the current frame. 
1 Last buffer in the current frame. The proper CRC and closing flag are sent after the last byte. 
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Table 25-11. Asynchronous HDLC TxBD Status and Control Field 
Descriptions (Continued) 


Description 


is [= | Reserved, should be cleared. 


CM Continuous mode 
0 Normal operation. 
|1 The CP does not clear R after this BD is closed, allowing its buffer to be resent when the CP next 
accesses this BD. However, R is cleared if an error occurs during transmission, regardless of CM. 


i bl Reserved, should be cleared. 


CTS lost. In NMSI mode, CTS is lost during frame transmission. If more than one buffer has data in the 
FIFO when this error occurs, CT is set in the currently open TxBD. Written by the asynchronous HDLC 
controller after it finishes sending the buffer. 





The data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).” 


25.16 Differences between HDLC and peyAeHronos 
HDLC 


The basic differences between HDLC and asynchronous HDLC modes are as follows: 


¢ Asynchronous HDLC does not support the GRACEFUL STOP TRANSMIT command. 


e Because asynchronous HDLC has no maximum received frame length counter, it 
receives all characters between opening and closing flags. There is no way to keep 
it from writing to memory. This does not affect the number of bytes received into a 
specific BD. A frame over the maximum length is received into memory in its 
entirety. 


e If an error causes a frame to stop being received, the character being received at the 
moment the error occurred is not written into memory. For example, if a CD lost 
error occurs, the frame is closed and the partial character 1s not written to memory. 
Thus, the octet count reflects only the number of bytes written to memory. 


e The automatic error counters in the HDLC controller are not implemented in the 
asynchronous HDLC controller. 


e Noisy characters (characters for which all three samples are not identical) are not 
accounted for in the asynchronous HDLC controller. It is assumed that the CRC 
catches any data integrity problems. 
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25.17 SCC Asynchronous HDLC Programming 
Example 
The following example shows initialization for an SCC in asynchronous HDLC mode. 
1. Initialize SDCR. 


2. In NMSI mode, configure ports A and C to enable RXD, TXD, CTS, CD, and RTS. 
In other modes, configure the TSA and its pins. 


. Configure a baud rate generator to the appropriate channel clocking frequency. 


Program SICR. Route the BRG clocking to the SCC and select whether the channel 
is using the TSA or the NMSI. 


Point RBASE and TBASE in the SCC parameter RAM to the first RxBD and TxBD. 
Issue the INIT RX AND TX PARAMETERS command for the SCC. 

Program RFCR and TFCR. 

Write MRBLR with the maximum Rx buffer size. 

. Write C_MASK and C_PRES with the standard values. 

10.Clear the Zero register. 


& w& 


oN DY 


11.Program RFTHR to the number of frames to be received before generating an 
interrupt. 


12.Program the control character tables, TXCTL_TBL and RXCTL_TBL. 
13. Initialize all RxBDs. 

14. Initialize all TxBDs. 

15.Clear SCCE by writing OxFFFF to it. 

16. Program SCCM to enable all preferred interrupts. 

17.Program GSMR_H. 


18.Program GSMR_L to asynchronous HDLC mode, but do not turn on the transmitter 
or receiver. 


19.Set the PSMR appropriately. See Section 25.13.3, “Asynchronous HDLC Mode 
Register (PSMR).” 


20.Enable the transmitter and receiver in GSMR_L. 
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Chapter 26 
SCC BISYNC Mode 


The byte-oriented BISYNC protocol was developed by IBM for use in networking 
products. There are three classes of BISYNC frames—transparent, nontransparent with 
header, and nontransparent without header, shown in Figure 26-1. The transparent frame 
type in BISYNC is not related to transparent mode, discussed in Chapter 28, “SCC 
Transparent Mode.” Transparent BISYNC mode allows full binary data to be sent with any 
possible character pattern. Each class of frame starts with a standard two-octet 
synchronization pattern and ends with a block check code (BCC). The end-of-text character 
(ETX) is used to separate the text and BCC fields. 


Nontransparent with Header 


Nontransparent without Header 


Transparent 


Text 


Figure 26-1. Classes of BISYNC Frames 


The bulk of a frame is divided into fields whose meaning depends on the frame type. The 
BCC is a 16-bit CRC format if 8-bit characters are used; it is a combination longitudinal 
(sum check) and vertical (parity) redundancy check if 7-bit characters are used. In 
transparent operation, a special character (DLE) is defined that tells the receiver that the 
next character is text, allowing BISYNC control characters to be valid text data in a frame. 
A DLE sent as data must be preceded by a DLE character. This is sometimes called 
byte-stuffing. The physical layer of the BISYNC communications link must synchronize 
the receiver and transmitter, usually by sending at least one pair of synchronization 
characters before each frame. 


BISYNC protocol is unusual in that a transmit underrun need not be an error. If an underrun 
occurs, a synchronization pattern is sent until data is again ready. In nontransparent 
operation, the receiver discards additional synchronization characters (SYNCs) as they are 
received. In transparent mode, DLE-SYNC pairs are discarded. Normally, for proper 
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transmission, an underrun must not occur between the DLE and its following character. 
This failure mode cannot occur with the MPC850. 


An SCC can be configured as a BISYNC controller to handle basic BISYNC protocol in 
normal and transparent modes. The controller can work with the time-slot assigner (TSA) 
or nonmultiplexed serial interface (NMSI). The SCC supports modem lines by connecting 
to port C pins or general-purpose I/O pins. The controller has separate transmit and receive 
sections whose operations are asynchronous with the core and either synchronous or 
asynchronous with other SCCs. 


26.1 Features : 
The following list summarizes features of the SCC in BISYNC mode: 


e Flexible data buffers 
e Eight control character recognition registers 
e Automatic SYNCI-SYNC2 detection 
© 16-bit pattern (bisync) 
e §8-bit pattern (monosync) 
e 4-bit pattern (nibblesync) 
¢ External SYNC pin support 
e SYNC/DLE stripping and insertion 
¢ CRC16 and LRC (sum check) generation/checking 
e VRC (parity) generation/checking _ 
e Supports BISYNC transparent operation 


¢ Maintains parity error counter 
e Reverse data mode capability 


26.2 SCC BISYNC Channel Frame Transmission 


The BISYNC transmitter is designed to work with almost no core intervention. When the 
transmitter is enabled, it starts sending SYN1—SYN2 pairs in the data synchronization 
register (DSR) or idles as programmed in the PSMR. The BISYNC controller polls the first 
BD in the channel’s TxBD table. If there is a message to send, the controller fetches the 
message from memory and starts sending it after the SYNI-SYN2 pair. The entire pair is 
always sent, regardless of GSMR[SYNL]. 


After a buffer is sent, if the last (TxBD[L]) and the Tx block check sequence (TxBD[TB]) 
bits are set, the BISYNC controller appends the CRC16/LRC and then writes the message 
status bits in TxBD status and control fields and clears the ready bit, TxBD[R]. It then starts 
sending the SYNI-SYN2 pairs or idles, according to GSMR[RTSM]. If the end of the 
current BD is reached and TxBD[L] is not set, only TxBD[R] is cleared. In both cases, an 
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interrupt is issued according to TxBD[I]. TXBD[I] controls whether interrupts are generated 
after transmission of each buffer, a specific buffer, or each block. The controller then 
proceeds to the next BD. 


If no additional buffers have been sent to the controller for transmission, an in-frame 
underrun is detected and the controller starts sending syncs or idles. If the controller is in 
transparent mode, it sends DLE-sync pairs. Characters are included in the block check 
sequence (BCS) calculation on a per-buffer basis. Each buffer can be programmed 
independently to be included or excluded from the BCS calculation; thus, excluded 
characters must reside in a separate buffer. The controller can reset the BCS generator 
before sending a specific buffer. In transparent mode, the controller inserts a DLE before 
sending a DLE character, so that only one DLE is used in the calculation. 


26.3 SCC BISYNC Channel Frame Reception 


Although the receiver is designed to work with almost no core intervention, the user can 
intervene on a per-byte basis if necessary. The receiver performs CRC16, longitudinal 
(LRC) or vertical redundancy (VRC) checking, sync stripping in normal mode, DLE-sync 
stripping, stripping of the first DLE in DLE-DLE pairs in transparent mode, and control 
character recognition. Control characters are discussed in Section 26.6, “SCC BISYNC 
Control Character Recognition.” 


When enabled, the receiver enters hunt mode where the data is shifted into the receiver shift 
register one bit at a time and the contents of the shift register are compared to the contents 
of DSR[SYN1, SYN2]. If the two are unequal, the next bit is shifted in and the comparison 
is repeated. When registers match, hunt mode is terminated and character assembly begins. 
The controller is character-synchronized and performs SYNC stripping and message 
reception. It reverts to hunt mode when it receives an ENTER HUNT MODE command, an error 
condition, or an appropriate control character. 


When receiving data, the controller updates the BCS bit in the BD for each byte transferred. 
When the buffer is full, the controller clears the E bit in the BD and generates an interrupt 
if the I bit in the BD is set. If incoming data exceeds the buffer length, the controller fetches 
the next BD; if E is zero, reception continues to its buffer. 


When a BCS is received, it is checked and written to the buffer. The BISYNC controller 
sets the last bit, writes the message status bits into the BD, clears the E bit, and then 
generates a maskable interrupt, indicating that a block of data was received and is in 
memory. The BCS calculations do not include SYNCs (in nontransparent mode) or 
DLE-SYNC pairs (in transparent mode). 


Note that GSMR_H[RFW] should be set for an 8-bit-wide receive FIFO for the BISYNC 
receiver. See Section 21.2.1, “General SCC Mode Register (GSMR).” 
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26.4 SCC BISYNC Parameter RAM 


When BISYNC mode is selected in GSMR_L[MODE], the protocol-specific area of the 
SCC parameter RAM is mapped as in Table 26-1. 


, Table 26-1. SCC BISYNC Parameter RAM Memory Map 


Oe 
0x34 CRCC CRC constant temporary value. - 
0x38° © |PRCRC Preset receiver/transmitter CRC16/LRC. These values should be preset to all 
ones or zeros, depending on the BCS used. 
0x34 |PTCRC 


| Ox3C Hword | Receive parity error counter. This 16-bit (modulo 2 ‘) counter maintained by the 
CP counts parity errors on receive if the parity feature of BISYNC is enabled. 
Initialize PAREC while the channel is disabled. | 
BSYNC 
BDLE Hword | 
DLE-SYNC pair and stripped on receive. See Section 26.8, “SCC BISYNC DLE 
Register (BDLE).” 


0x42 CHARACTER1 Control character 1-8. These values represent control characters that the 


BISYNC controller recognizes. See Section 26.6, “SCC BISYNC Control 
CHARACTER2 | Hword | Character Recognition.” 









































BISYNC SYNC register. Contains the value of the SYNC to be sent as the second 
byte of a DLE-SYNC pair in an underrun condition and stripped from incoming 

data on receive once the receiver synchronizes to the data using the DSR and 
SYN1-SYN2 pair. See Section 26.7, “BISYNC SYNC Register (BSYNC).” 


) 
x 
ie) 







BISYNC DLE register. Contains the value to be sent as the first byte of a 


0x46 CHARACTERS | Hword 


0x48  |CHARACTER4 
CHARACTERS 


CHARACTERS | Hword 
Ox4E | CHARACTERT | Hword 


0x50 | CHARACTERS 


Hword | Receive control character mask. Masks CHARACTERn comparison so contro! 
character classes can be defined. Setting a bit enables and clearing a bit masks 
comparison. See Section 26.6, “SCC BISYNC Control Character Recognition.” 





© (o) © (a) © 
~< =< x< ~< ~< 
ol eS - - . 
mo O| > ES o 





' From SCCx base address 


The SYNI-SYN2 synchronization characters are programmed in the DSR (see 
Section 21.2.3, “Data Synchronization Register (DSR).’) The BISYNC controller uses the 
same basic data structure as other modes; receive and transmit errors are reported through 
their respective BDs. Line status is reflected on port C pins and a maskable interrupt is 
generated when the status changes. There are two basic ways to handle BISYNC channels: 


e The controller can inspect data on a per-byte basis and interrupt the core each time 
a byte is received. 


e The controller can be programmed so software handles the first two or three bytes. 
The controller directly handles subsequent data without interrupting the core. 
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26.5 SCC BISYNC Commands 


Transmit and receive commands are issued to the CP command register (CPCR). Transmit 
commands are described in Table 26-2. 


Table 26-2. Transmit Commands 


STOP After hardware or software is reset and the channel is enabled in the GSMR, the channel is in transmit 

TRANSMIT enable mode and starts polling the first BD every 64 transmit clocks. This command stops transmission | 
after a maximum of 64 additional bits without waiting for the end of the buffer and the transmit FIFO to 
be flushed. TBPTR is not advanced, no new BD is accessed, and no new buffers are sent for this 


channel. SYNC—SYNC or DLE—SYNC pairs are sent continually until a RESTART TRANSMIT is issued. A 
STOP TRANSMIT can be used when an EOT sequence should be sent and transmission should stop. 
After transmission resumes, the EOT sequence should be the first buffer sent to the controller. 

Note that the controller remains in transparent or normal mode after it receives a STOP TRANSMIT or 
RESTART TRANSMIT Command. 


GRACEFUL Stops transmission after the current frame finishes sending or immediately if there is no frame being 

STOP sent. SCCE[GRA] is set once transmission stops. Then BISYNC transmit parameters and TxBDs can 

TRANSMIT be modified. The TBPTR points to the next TxBD. Transmission resumes when the R bit of the next BD 
is set and a RESTART TRANSMIT is issued. 


RESTART Lets characters be sent on the transmit channel. The BISYNC controller expects it after a STOP 

TRANSMIT TRANSMIT or a GRACEFUL STOP TRANSMIT Command is issued, after a transmitter error occurs, or after a 
STOP TRANSMIT is issued and the channel is disabled in its SCCM. The controller resumes transmission 
from the current TBPTR in the channel’s TxBD table. 


INIT TX Initializes all transmit parameters in the serial channel’s parameter RAM to their reset state. Issue only 
PARAMETERS | when the transmitter is disabled. INIT TX AND RX PARAMETERS resets transmit and receive parameters. 





Receive commands are described in Table 26-2. 


Table 26-3. Receive Commands 


RESET BCS | Immediately resets the receive BCS accumulator. It can be used to reset the BCS after recognizing a 
ALCULATION j control character, thus signifying that a new block is beginning. 





|ENTER HUNT | After hardware or software is reset and the channel is enabled in SCCM, the channel is in receive 
enable mode and uses the first BD. This command forces the controller to stop receiving and enter 
hunt mode, during which the controller continually scans the data stream for an SYN1I-SYN2 
| Sequence as programmed in the DSR. After receiving the command, the current receive buffer is 
closed and the BCS is reset. Message reception continues using the next BD. 


CLOSE RXBD | Used to force the SCC to close the current RxBD if it is in use and to use the next BD for subsequent 
data. If data is not being received, no action is taken. 


INIT RX Initializes receive parameters in this serial channel's parameter RAM to reset state. Issue only when 
PARAMETERS | the receiver is disabled. An INIT TX AND RX PARAMETERS resets transmit and receive parameters. 
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26.6 SCC BISYNC Control Character Recognition 


The BISYNC controller recognizes special control characters that customize the protocol 
implemented by the BISYNC controller and aid its operation in a DMA-oriented 
environment. They are used for receive buffers longer than one byte. In single-byte buffers, 
each byte can easily be inspected so control character recognition should be disabled. 


The control character table lets the BISYNC controller recognize the end of the current 
block. Because the controller imposes no restrictions on the format of BISYNC blocks, 
software must respond to received characters and inform the controller of mode changes 
and of certain protocol events, such as resetting the BCS. Using the control character table 
correctly allows the remainder of the block to be received without interrupting software. 


Up to eight control characters can be defined to inform the BISYNC controller that the end 
of the current block is reached and whether a BCS is expected after the character. For 
example, the end-of-text character (ETX) implies an end-of-block (ETB) with a subsequent 
BCS. An enquiry (ENQ) character designates an end of block without a subsequent BCS. 
All the control characters are written into the data buffer. The BISYNC controller uses a 
table of 16-bit entries to support control character recognition. Each entry consists of the 
control character, an end-of-table bit (E), a BCS expected bit (B), and a hunt mode bit (H). 
The RCCM entry defines classes of control characters that support masking option. 


Offset from 
SCCx Base 


ER1 
CHARACTER2 
CHARACTERS 


CHARACTER4 


Figure 26-2. Control Character Table and RCCM 
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Table 26-4 describes control character table and RCCM fields. 
Table 26-4. Control Character Table and RCCM Field Descriptions 


a 


0x42- E End of table. 
0x50 10 This entry is valid. The lower eight bits are checked against the incoming character. 
In tables with eight control characters, E should be zero in all eight positions. 
1 The entry is not valid. No other valid entries exist beyond this entry. 


BCS expected. A maskable interrupt is generated after the buffer is closed. 

O The character is written into the receive buffer and the buffer is closed. 

1 The character is written into the receive buffer. The receiver waits for one LRC or 
two CRC bytes of BCS and then closes the buffer. This should be used for ETB, 

ETX, and ITB. 






















Hunt mode. Enables hunt mode when the current buffer is closed. 
0 The BISYNC controller maintains character synchronization after closing this buffer. 
1 The BISYNC controller enters hunt mode after closing the buffer. When the B bit is 

set, the controller enters hunt mode after receiving the BCS. 


Es a 


CHARACTERn | Control character 1-8. When using 7-bit characters with parity, include the parity bit in 












the character value. 


a 
er Rene 


8-15 |RCCM Received control character mask. Masks comparison of CHARACTERn. Each bit of 

RCCM masks the corresponding bit of CHARACTERn. 

0 Mask this bit in the comparison of the incoming character and CHARACTERn. 

1 The address comparison on this bit proceeds normally and no masking occurs. If 

RCCM is not set, erratic operation can occur during control character recognition. 

26.7 BISYNC SYNC Register (BSYNC) 
The BSYNC register defines BISYNC stripping and SYNC character insertion. When an 
underrun occurs, the BISYNC controller inserts SYNC characters until the next buffer is 
available for transmission. If the receiver is not in hunt mode when a SYNC character is 
received, it discards this character if the valid bit (BSYNC[V]) is set.When using 7-bit 
characters with parity, the parity bit should be included in the SYNC register value. 





ESE ks ae ee 


Undefined 


R/W 
SCC Base + Ox3E 


Figure 26-3. BISYNC SYNC (BSYNC) 
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Table 26-5 describes BSYNC fields. 
Table 26-5. BSYNC Field Descriptions 


Valid. If V = 1 and the receiver is not in hunt mode when a SYNC shatacter is received, this 
character is discarded. 


a 
SYNC SYNC character 


26.8 SCC BISYNC DLE Register (BDLE) 


The BDLE register is used to define the BISYNC stripping and insertion of DLE characters. 
When an underrun occurs while a message is being sent in transparent mode, the BISYNC 
controller inserts DLE-SYNC pairs until the next buffer is available for transmission. 










In transparent mode, the receiver discards any DLE character received and excludes it from 
the BCS if the valid bit (BDLE[V]) is set. If the second character is SYNC, the controller 
discards it and excludes it from the BCS. If it is a DLE, the controller writes it to the buffer 
and includes it in the BCS. If it is not a DLE or SYNC, the controller examines the control | 
character table and acts accordingly. If the character is not in the table, the buffer is closed 
with the DLE follow character error bit set. If the valid bit is not set, the receiver treats the 
character as a normal character. When using 7-bit characters with parity, the parity bit 
should be included in the DLE register value. 





. Undefined 
SCC Base + 0x40 


Figure 26-4. BISYNC DLE (BDLE) 






Table 26-6 describes BDLE fields. 
Table 26-6. BDLE Field Descriptions 


Valid. If V = 1 and the receiver is not in hunt mode when a SYNC character is received, this 
character is discarded. 


er 
a 
SYNC SYNC character 
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26.9 Sending and Receiving the Synchronization 
Sequence 


The BISYNC channel can be programmed to send and receive a synchronization pattern 
defined in the DSR. GSMR_H[SYNL] defines pattern length, as shown in Table 26-7. The 
receiver synchronizes on this pattern. Unless SYNL is zero (external sync), the transmitter 
always sends the entire DSR contents, Isb first, before each frame—the chosen 4- or 8-bit 
pattern can be repeated in the lower-order bits. 


Table 26-7. Receiver SYNC Pattern Lengths of the DSR 


Bit Assignments 

cee Rao 
ee ee 
a Ni et re ec ete te ee 


26.10 Handling Errors in the SCC BISYNC 


The controller reports message transmit and receive errors using the channel BDs, error 
counters, and the SCCE. Modem lines can be directly monitored via the port C pins. 
Table 26-8 describes transmit errors. 

















Table 26-8. Transmit Errors 


es 


Transmitter The channel stops sending the buffer, closes it, sets TxBD[UN], and generates a TXE interrupt if it 
Underrun is enabled. The channel resumes transmission after a RESTART TRANSMIT Command is received. 
Underrun cannot occur between frames or during a DLE—XXX pair in transparent mode. 












CTS Lost during | The channel stops sending the buffer, closes it, sets TxBD[CT], and generates a TXE interrupt if 
Message not masked. Transmission resumes when a RESTART TRANSMIT command is received. 
Transmission 
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Table 26-9 describes receive errors. © 


Table 26-9. Receive Errors 


ee 


Overrun The controller maintains a receiver FIFO for receiving data. The CP begins programming the SDMA 
channel (if the buffer is in external memory) and updating the CRC when the first byte is received in 
the Rx FIFO. If an Rx FIFO overrun occurs, the controller writes the received byte over the 
previously received byte. The previous character and its status bits are lost. The channel then closes 
the buffer, sets RxBD[OV], and generates the RXB interrupt if it is enabled. Finally, the receiver 
enters hunt mode. 





























CD Lost during 
Message 
Reception 


The channel stops receiving, closes the buffer, sets RxBD[CD], and generates the RXB interrupt if 
not masked. This error has the highest priority. If the rest of the message is lost, no other errors are 
checked in the message. The receiver immediately enters hunt mode. 








The channel writes the received character to the buffer and sets RxBD[PR]. The channel stops 
receiving, closes the buffer, sets RxBD[PR], and generates the RXB interrupt if it is enabled. The 
channel also increments PAREC and the receiver immediately enters hunt mode. 


The channel updates the CR bit in the BD every time a character is received with a byte delay of 
eight serial clocks between the status update and the CRC calculation. When control character 
recognition is used to detect the end of the block and cause CRC checking, the channel closes the 
| buffer, sets the CR bit in the BD, and generates the RXB interrupt if it is enabled. 


26.11 BISYNC Mode Register (PSMR) 


The PSMR is used as the BISYNC mode register, shown in Figure 26-5. PSMR[RBCS, 
RTR, RPM, TPM] can be modified on-the-fly. 





0xA28 (PSMR2), 0xA48 (PSMR3) 
Figure 26-5. Protocol-Specific Mode Register for BISYNC (PSMR) 
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Table 26-10 describes PSMR fields. 


MOTOROLA 


Table 26-10. PSMR Field Descriptions 


0000, one pair is sent. If NOS = 1111, 16 pairs are sent. The entire pair is always sent, regardless of 
how GSMR[SYNL) is set. NOS can be modified on-the-fly. 


CRC selection. 

x0 Reserved. 

01 CRC16 (BISYNC). X16 + X15 + X2 + 1. PRCRC and PTCRC should be initialized to all zeros or all 
ones before the channel is enabled. In either case, the transmitter sends the calculated CRC 
noninverted and the receiver checks the CRC against zero. Eight-bit data characters (without 
parity) are configured when CRC16 is chosen. 

11 LRC (sum check). (BISYNC). For even LRC, initialize PRCRC and PTCRC to zeroes before the 
channel is enabled; for odd LRC, they should be initialized to ones. 

Note that the receiver checks character parity when BCS is programmed to LRC and the receiver 
is not in transparent mode. The transmitter sends character parity when BCS is programmed to | 
LRC and the transmitter is not in transparent mode. Use of parity in BISYNC assumes that 7-bit 
data characters are being used. 


Receive BCS. The receiver internally stores two BCS calculations separated by an eight serial clock 

delay to allow examination of a received byte to determine whether it should used in BCS calculation. | 

0 Disable receive BCS. | 

1 Enable receive BCS. Should be set (or reset) within the time taken to receive the following data 
byte. When RBCS is reset, BCS calculations exclude the latest fully received data byte. When 
RBCS is set, BCS calculations continue as normal. 


Receiver transparent mode. 

0 Normal receiver mode with SYNC stripping and control character recognition. 

1 Transparent receiver mode. SYNCs, DLEs, and control characters are recognized only after a 
leading DLE character. The receiver calculates the CRC16 sequence even if it is programmed to 
LRC while in transparent mode. Initialize PRCRC to the CRC16 preset value before setting RTR. 


Reverse data. 

0 Normal operation. 

1 Any portion of this SCC defined to operate in BISYNC mode operates by reversing the character bit | 
order and sending the msb first. 


Disable receiver while sending. DRT should not be set for typical BISYNC operation. 

0 Normal operation. 

1 As the SCC sends data, the receiver is disabled and gated by the internal RTS signal. This helps if 
the BISYNC channel is being configured onto a multidrop line and the user does not want to receive 
its own transmission. Although BISYNC usually uses a half-duplex protocol, the receiver is not 
actually disabled during transmission. 


Reserved, should be cleared. 


Receiver parity mode. Selects the type of parity check that the receiver performs. RPM can be 

modified on-the-fly and is ignored unless CRC = 11 (LRC). Receive parity errors cannot be disabled 

but can be ignored. 

00 Odd parity. The transmitter counts ones in the data word. If the sum is not odd, the parity bit is set | 
to ensure an odd number. An even sum indicates a transmission error. 

01 Low parity. If the parity bit is not low, a parity error is reported. 

10 Even parity. An even number must result from the calculation performed at both ends of the line. 

11 High parity. If the parity bit is not high, a parity error is reported. 
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Table 26-10. PSMR Field Descriptions (Continued) 


i 


14—15|TPM | Transmitter parity mode. Selects the type of parity the transmitter performs and can be modified 
on-the-fly. TPM is ignored unless CRC = 11 (LRC). 


00 Odd parity. 

01 Force low parity (always send a zero in the parity bit position).. 
10 Even parity. 

11 Force high parity (always send a one in the parity bit position). 


26.12 SCC BISYNC Receive BD (RxBD) 


The CP uses BDs to report on each buffer received. It closes the buffer, generates a 
maskable interrupt, and starts receiving data into the next buffer after any of the following: 





e A user-defined control character is received. 
e An error is detected. 

e A full receive buffer is detected. 

¢ The ENTER HUNT MODE command is issued. 
e The CLOSE RX BD command is issued. 


Figure 26-6 shows the SCC BISYNC RxBD. 


EI ee es] | S| OE | 2 eee ova 


Data Length . 


Rx Data Buffer Pointer 





_ Figure 26-6. SCC BISYNC RxBD_ 


Table 26-11 describes SCC BISYNC RxBD status and control fields. 
Table 26-11. SCC BISYNC RxBD Status and Control Field Descriptions 


feel 


Empty. 

0 The buffer is full or stopped receiving because of an error. The core can read or write any fields of this 
RxBD. The CP does not use this BD as long as the E bit is zero. 

1 The buffer is not full. The CP controls this BD and buffer. The core should not update this BD. 


— | Reserved, should be cleared. 


Wrap (last BD in table). 

0 Not the last BD in the table. | | 

1 Last BD in the table. After this buffer is used, the CP receives incoming data into the first BD that 
RBASE points to. The number of BDs in this table is determined by the W bit and by overall space 
constraints of the dual-port RAM. 
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Table 26-11. SCC BISYNC RxBD Status and Control Field Descriptions (Continued) 


a 


Interrupt. 
0 No interrupt is generated after this buffer is used. 
1 SCCE[RXB] is set when the controller closes this buffer, which can cause an interrupt if it is enabled. 












Last in frame. Set when this buffer is the last in a frame. If CD is negated in envelope mode or an error 
is received, one or more of the OV, CD, and DE bits are set. The controller writes the number of frame 
octets to the data length field. 

0 Not the first buffer in the frame. 

1 The first buffer in the frame. 














First in frame. Set when this is the first buffer in a frame. 
O Not the first buffer in a frame. 
1 First buffer in a frame 
















Continuous mode. 

0 Normal operation. 

1 The CP does not clear E after this BD is closed; the buffer is overwritten when the CP accesses this 
BD next. However, E is cleared if an error occurs during reception, regardless of how CM is set. 


| Reserved, should be cleared. 


DPLL error. Set when a DPLL error occurs during reception. In decoding modes where a transition is 
should occur every bit, the DPLL error is set when a transition is missing. 


Reserved, should be cleared. 


Rx non-octet-aligned frame. Set when a frame is received containing a number of bits not evenly 
divisible by eight. 


5 
a 
oO 





Parity error. Set when a character with parity error is received. Upon a parity error, the buffer is closed; 
thus, the corrupted character is the last byte of the buffer. A new Rx buffer receives subsequent data. 


'?) 


R Rx CRC error. Set when this frame contains a CRC error. Received CRC bytes are always written to 
the receive buffer. | 


Overrun. Set when a receiver overrun occurs during frame reception. 
Carrier detect lost. Indicates when the carrier detect signal, CD, is negated during frame reception. 


Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).” Data length represents the number of octets the CP writes into this 
buffer, including the BCS. For BISYNC mode, clear these bits. It is incremented each time 
a received character is written to the buffer. 


26.13 SCC BISYNC Transmit BD (TxBD) 


The CP arranges data to be sent on an SCC channel in buffers referenced by the channel 
TxBD table. The CP uses BDs to confirm transmission or indicate errors so the core knows 
buffers have been serviced. The user configures status and control bits before transmission, 
but the CP sets them after the buffer is sent. 


_ = _ 
oO N = 
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mie} = fcr 
Data Length | 


Tx Data Buffer Pointer 





Figure 26-7. SCC BISYNC TxBD 


Table 26-12 describes SCC BISYNC TxBD status and control fields. 
Table 26-12. SCC BISYNC TxBD Status and Control Field Descriptions 


Ready. 

0 The buffer is not ready for transmission. The current BD and buffer can be updated. The CP clears R | 
after the buffer is sent or after an error condition. | 

1 The user-prepared buffer has not been sent or is being sent. This BD cannot be updated while R = 1. 


Wrap (last BD in table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the cP receives incoming data into the first BD that 
TBASE points to. The number of TxBDs in this table is determined only by the W bit and overall 
space constraints of the dual-ported RAM. 


Interrupt. 
O No interrupt is generated after this buffer is serviced. | . 
1 SCCE[TXB] or SCCE[TXE] is set after the CP services this buffer, which can cause an interrupt. 


Last in message. 

O The last character in the buffer is not the last character in the current block. 

1 The last character in the buffer is the last character in the current block. The transmitter enters and 
stays in normal mode after sending the last character in the buffer and the BCS, if enabled. 


Transmit BCS. Valid only when the L bit is set. 

0 Send an SYN1—SYN2 or idle sequence (specified in GSMR _H[RTSM]) after the last character in the 
buffer. 

1 Send the BCS sequence after the last character. The controller also resets the BCS generator after 
sending the BCS. 


Continuous mode. 

0 Normal operation. 

1 The CP does not clear R after this BD is closed, so the buffer is resent when the CP next accesses 
this BD. However, R is cleared if an error occurs during transmission, regardless of how CM is set. 


BCS reset. Determines whether transmitter BCS accumulation is reset before sending the data buffer. 
0 BCS accumulation is not reset. 
1 BCS accumulation is reset before sending the data buffer. 


Transmit DLE. 

0 No automatic DLE transmission can occur before the data buffer. 

1 The transmitter sends a DLE character before sending the buffer, which saves writing the first DLE to 
a separate buffer in transparent mode. See TR for information on control characters. 
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Table 26-12. SCC BISYNC TxBD Status and Control Field Descriptions 


a 


TR Transparent mode. 

0 The transmitter enters and stays in normal mode after sending the buffer. The transmitter 
automatically inserts SYNCs if an underrun condition occurs. 

1 The transmitter enters or stays in transparent mode after sending the buffer. It automatically inserts 
DLE-—SYNC pairs if an underrun occurs (the controller finishes a buffer with L = O and the next BD is 
not available). It also checks all characters before sending them. If a DLE is detected, another DLE is 
sent automatically. Insert a DLE or program the controller to insert one before each control 
character. The transmitter calculates the CRC16 BCS even if PSMR[BCS] is programmed to LRC. 

Initialize PTCRC to CRC16 before setting TR. 


















BCS enable. 
0 The buffer consists of characters that are excluded from BCS accumulation. 
1 The buffer consists of characters that are included in BCS accumulation. 


11-13 J Reserved, should be cleared. 
14 UN Underrun. Set when the BISYNC controller encounters a transmitter underrun error while sending the 
associated data buffer. The CPM writes UN after it sends the associated buffer. 
CTS lost. The CP sets CT when CTS is lost during message transmission after it sends the data buffer. 


Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).” Although it is never modified by the CP, data length should be greater 
than zero. The CPM writes these fields after it finishes sending the buffer. 


26.14 BISYNC Event Register (SCCE)/BISYNC Mask 
Register (SCCM) 


The BISYNC controller uses the SCC event register (SCCE) to report events recognized by 
the BISYNC channel and to generate interrupts. When an event is recognized, the controller 
sets the corresponding SCCE bit. Interrupts are enabled by setting, and masked by clearing, 
the equivalent bits in the BISYNC mask register (SCCM). SCCE bits are reset by writing 
ones; writing zeros has no effect. Unmasked bits must be reset before the CP negates the 
internal interrupt request signal. 















Lee 24 8 9 | 40 | a1 | 12 | 13 | 4 
: 0000_0000_0000_0000 


R/W 
0xA30 (SCCE2)/0xA34 (SCCM2); 0xA50 (SCCE3)/0xA54 (SCCM3) 
Figure 26-8. BISYNC Event Register (SCCE)/BISYNC Mask Register (SCCM) 
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Table 26-13 describes SCCE and SCCM fields. 
Table 26-13. SCCE/SCCM Field Descriptions 


EC 
oa [- [fern cmattoomwes 
[air fomonnsaennesccmnmropaome 


DPLL CS changed. Set when carrier sense status generated by the DPLL changes. Real-time status 
can be found in SCCS. This is not the CD status discussed elsewhere. Valid only when DPLL is used. 


Reserved, should be cleared. 


Graceful stop complete. Set as soon the transmitter finishes any message in progress when a 
GRACEFUL STOP TRANSMIT is issued (immediately if no message is in progress). 


c 
reception after an ENTER HUNT MODE command. 


26.15 SCC Status Registers (SCCS) 


The SCC status (SCCS) register allows real-time monitoring of RXD. The real-time status 
of CTS and CD are part of the port C parallel I/O. 
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0xA37 (SCCS2), 0xA57 (SCCS3) 
Figure 26-9. SCC Status Registers (SCCS) 
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Table 26-14 describes SCCS fields. 
Table 26-14. SCCS Field Descriptions 


8 
os |- | Reserved, should be cleared. 


r CS Carrier sense (DPLL). Shows the real-time carrier sense of the line as determined by the DPLL. 







O The DPLL does not sense a carrier. 
1 The DPLL senses a carrier. 


7 [= | Reserved, should be cleared. 


26.16 Programming the SCC BISYNC Controller 


Software has two ways to handle data received by the BISYNC controller. The simplest is 
to allocate single-byte receive buffers, request an interrupt on reception of each buffer, and 
implement BISYNC protocol entirely in software on a byte-by-byte basis. This flexible 
approach can be adapted to any BISYNC implementation. The obvious penalty is the 
overhead caused by interrupts on each received character. 









A more efficient method is to prepare and link multi-byte buffers in the RxBD table and use 
software to analyze the first two to three bytes of the buffer to determine the type of block 
received. When this is determined, reception continues without further software 
intervention until it encounters a control character, which signifies the end of the block and 
causes software to revert to byte-by-byte reception. 


To accomplish this, set SCCM[RCH] to enable an interrupt on every received byte so 
software can analyze each byte. After analyzing the initial characters of a block, either set 
PSMR[RTR] or issue a RESET BCS CALCULATION command. For example, if a DLE-STX is 
received, enter transparent mode. By setting the appropriate PSMR bit, the controller strips 
the leading DLE from DLE-character sequences. Thus, control characters are recognized 
only when they follow a DLE character. PSMR[RTR] should be cleared after a DLE-ETX 
is received. 


Alternatively, after an SOH is received, a RESET BCS CALCULATION should be issued to 
exclude SOH from BCS accumulation and reset the BCS. Notice that PSPMR[RBCS] is not 
needed because the controller automatically excludes SYNCs and leading DLEs. 


After the type of block is recognized, SCCE[RCH] should be masked. The core does not 
interrupt data reception until the end of the current block, which is indicated by the 
reception of a control character matching the one in the receive control character table. 
Using Table 26-15, the control character table should be set to recognize the end of the 
block. 
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Table 26-15. Control Characters 


Control Characters 
New on pee pe 


After ETX, a BCS is expected; then the buffer should be closed. Hunt mode should be 
entered when a line turnaround occurs. ENQ characters are used to stop sending a block 
and to designate the end of the block for a receiver, but no CRC is expected. After control 
character reception, set SCCM[RCH] to reenable interrupts for each byte of data received. 


26.17 SCC BISYNC Programming Example 


This BISYNC controller initialization example for SCC2 uses an external clock. The 
controller is configured with RTS2, CTS2, and CD2 active. Both the receiver and 
transmitter use CLK3. 















1. Configure the port A pins to enable TXD2 and RXD2. Write PAPAR[12,13] and 
PAODR[12,13] with ones and PADIR[12,13] with zeros. 


2. Configure the port C pins to enable RTS2, CTS2, and CD2. Set PCSO[8, 9] and 
PCPAR[14]; clear PCPAR[8, 9] and PCDIR[8, 9, 14]. 


Configure port A to enable CLK3. Set PAPAR[5] and clear PADIR[5]. 

Connect CLK3 to SCC2 using the serial interface. Set SICR[R2CS, T2CS] to0b110. 
Connect the SCC2 to the NMSI and clear SICR[SC2]. 

Initialize the SDMA configuration register (SDCR). 


Assuming one RxBD at the beginning of dual-port RAM followed by one TxBD, 
write RBASE with 0x0000 and TBASE with 0x0008. 


8. Program CPCR to execute INIT RX AND TX PARAMETERS. This updates RBPTR and 
TBPTR to the new values of RBASE and TBASE. 


9. Write RFCR and TFCR with 0x10 for normal operation. 


10. Write MRBLR with the maximum number of bytes per receive buffer. For this case, 
assume 16 bytes, so MRBLR = 0x0010. 


11.Write PRCRC with 0x0000 to comply with CRC16. 

12. Write PTCRC with 0x0000 to comply with CRC16. 

13.Clear PAREC for clarity. 

14.Write BSYNC with 0x8033, assuming a SYNC value of 0x33. 
15. Write DSR with 0x3333. 


Baran STS NSS aN a SSSA ON NN DA RNR ORS ON NY SN Ca a SR AOU SIRES ERREES ARR EN RO OR OOO TORENT TIERONE 
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16. Write BDLE with 0x8055, assuming a DLE value of 0x55. 
17.Write CHARACTERI-8 with 0x8000. They are not used. 
18. Write RCCM with OxEOFF. It is not used. 


19. Initialize the RxBD and assume the data buffer is at 0x00001000 in main memory. 
Then write 0xBO00 to RxBD[Status and Control], 0xO000 to RxBD[Data Length] 
(optional), and 0x00001000 to RxBD[Buffer Pointer]. 


20. Initialize the TxBD and assume the Tx data buffer is at 0x00002000 in main memory 
and contains five 8-bit characters. Then write OxBD20 to TxBD[Status and Control] 
0x0005 to TxBD[Data Length], and 0x00002000 to TxBD[Buffer Pointer]. 


21.Write OxFFFF to SCCE to clear any previous events. 
22.Write 0x0013 to SCCM to enable the TXE, TXB, and RXB interrupts. 


23.Write 0x20000000 the CIMR so SCC2 can generate a system interrupt. CICR 
should also be initialized. 


24. Write Ox00000020 to GSMR_H2 to configure a small receive FIFO width. 


25. Write 0x00000008 to GSMR_L2 to configure CTS and CD to automatically control 
transmission and reception (DIAG bits) and the BISYNC mode. Notice that the 
transmitter (ENT) and receiver (ENR) are not yet enabled. 


26.Set PSMR to 0x0600 to configure CRC16, CRC checking on receive, and normal 
operation (not transparent). 


Write 0x00000038 to GSMR_L2 to enable the SCC2 transmitter and receiver. This 
additional write ensures that ENT and ENR are enabled last. After 5 bytes are sent, the 
TXBD is closed. The buffer is closed after 16 bytes are received. Any received data beyond 
16 bytes causes a busy (out-of-buffers) condition since only one RxBD is prepared. 
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Chapter 27 
SCC Ethernet Mode 


The Ethernet [EEE 802.3 protocol is a widely used LAN protocol based on the carrier sense 
multiple access/collision detect (CSMA/CD) approach. Because Ethernet and IEEE 802.3 
protocols are similar and can coexist on the same LAN, both are referred to as Ethernet in 
this manual, unless otherwise noted. Figure 27-1 shows Ethernet and IEEE 802.3 frame 
Structure. 











~t Frame Length is 64-1518 Bytes » 
Preambl Start Frame | Destination Source Type/ Frame Check 
ee Delimiter Address Address Length Data Sequence 
7 Bytes 1 Byte 6 Bytes 6 Bytes 2 Bytes 46-1500 Bytes 4 Bytes 


NOTE: The Isb of each octet is transmitted first. 


Figure 27-1. Ethernet Frame Structure 


The frame begins with a 7-byte preamble of alternating ones and zeros. Because the frame 
is Manchester encoded, the preamble gives receiving stations a known pattern on which to 
lock. The start frame delimiter follows the preamble, signifying the beginning of the frame. 
The 48-bit destination address is next, followed by the 48-bit source address. Original 
versions of the IEEE 802.3 specification allowed 16-bit addressing, but this addressing has 
never been widely used and is not supported. 


The next field is the Ethernet type field/IEEE 802.3 length field. The type field signifies the 
protocol used in the rest of the frame and the length field specifies the length of the data 
portion of the frame. For Ethernet and IEEE 802.3 frames to coexist on the same LAN, the 
length field of the frame must always be different from any type fields used in Ethernet. This 
limits the length of the data portion of the frame to 1,500 bytes and total frame length to 
1,518 bytes. The last 4 bytes of the frame are the frame check sequence (FCS), a standard 
32-bit CCITT-CRC polynomial used in many protocols. 


When a station needs to transmit, it checks for LAN activity. When the LAN is silent for a 
specified period, the station starts sending. At that time, the station continually checks for 
collisions on the LAN; if one is found, the station forces a jam pattern (all ones) on its frame 
and stops sending. Most collisions occur close to the beginning of a frame. The station waits 
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arandom period of time, called a backoff, before trying to retransmit. Once the backoff time 
expires, the station waits for silence on the LAN before retransmitting, which is called a 
retry. If the frame cannot be sent within 15 retries, an error occurs 


10-Mbps Ethernet transmits at 0.8 us per byte. The preamble plus start frame delimiter is 
sent in 6.4 us. The minimum 10-Mbps Ethernet interframe gap is 9.6 us and the slot time 
is 52 us. 


27.1 Ethernet on the MPC850 


Setting GSMR[MODE] to 0b1100 selects Ethernet. The SCC performs the full set of IEEE 
802 .3/Ethernet CSMA/CD media access control and channel interface functions. 


U-Bus 













Slot Time 





cS and Defer 
Control E Counter 
Registers = 
Par = Clock _ RCLK 
Peripheral Bus Generator TCLK 


Internal Clocks 


RTS = TENA 


CD = RENA 
CTS = CLSN 


Transmitter 
Control 


Receiver 
Control Data Data 





Figure 27-2. Ethernet Block Diagram 


The MPC850 Ethernet controller requires an external serial interface adaptor (SIA) and 
transceiver function to complete the interface to the media. This function is implemented 
in the Motorola MC68160 enhanced Ethernet serial transceiver (EEST). — 


The MPC850+EEST solution provides a direct connection to the attachment unit interface 
(AUD or twisted-pair (LOBASE-T). The EEST provides a glueless interface to the MPC850, 
Manchester encoding and decoding, automatic selection of 1OBASE-T versus AUI ports, 
1OBASE-T polarity detection and correction. The MC68160 documentation gives more 
information. 


Although the MPC850 contains DPLLs that allow Manchester encoding and decoding, 
these DPLLs were not designed for Ethernet rates. Therefore, the MPC850 Ethernet 
controller bypasses the on-chip DPLLs and uses the external system interface adaptor on 
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the EEST instead. The on-chip DPLL cannot be used for low-speed (1-Mbps) Ethernet 
either because it cannot properly detect start-of-frame or end-of-frame. 


Note that the CPM of the MPC850 requires a minimum system clock frequency of 24 MHz 
to support Ethernet. 


27.2 Features 


The following list summarizes the main features of the SCC in Ethernet mode: 


e Performs MAC layer functions of Ethernet and IEEE 802.3 
e Performs framing functions 
— Preamble generation and stripping 
— Destination address checking 
— CRC generation and checking 
— Automatically pads short frames on transmit 
— Framing error (dribbling bits) handling 
e Full collision support 
— Enforces the collision (jamming) 
— Truncated binary exponential backoff algorithm for random wait 
— Two nonaggressive backoff modes 
— Automatic frame retransmission (until “attempt limit” is reached) 
— Automatic discard of incoming collided frames 
— Delay transmission of new frames for specified interframe gap 
e Maximum 10 Mbps bit rate 
e¢ Optional full-duplex support 





e Back-to-back frame reception 

e Detection of receive frames that are too long 
e Miultibuffer data structure 

e Supports 48-bit addresses in three modes 


— Physical—One 48-bit address recognized or 64-bin hash table for physical 
addresses 


— Logical—64-bin group address hash table plus broadcast address checking 

— Promiscuous—Receives all addresses, but discards frame if reject pin asserted 
e Up to eight parallel I/O pins can be sampled and appended to any frame 
e Optional heartbeat indication 
e Transmitter network management and diagnostics 

— Lost carrier sense 

— Underrun 

— Number of collisions exceeded the maximum allowed 
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— Number of retries per frame 
— Deferred frame indication 
— Late collision 
e Receiver network management and diagnostics 
— CRC error indication 
— Nonoctet alignment error 
— Frame too short 
— Frame too long 
— Overrun 
— Busy (out of buffers) 
e Error counters 
— Discarded frames (out of buffers or overrun occurred) 
— CRC errors 
— Alignment errors 
e Internal and external loopback mode 


27.3 Learning Ethernet on the MPC850 


The standard SCC functionality has been enhanced on the MPC850 to support Ethernet. 
First-time MPC850 users who plan to use Ethernet should first read the following: 


e Chapter 21, “Serial Communications Controllers,’ describes basic operation of the 
SCCs. 


e Chapter 17, “Communications Processor Module and CPM Timers,’ describes how 
the CPM issues special commands to the Ethernet channel. The dual-port RAM 
loads Ethernet parameters and initializes BDs for the Ethernet channel to use. 


e Chapter 19, “SDMA Channels and IDMA Emulation,” discusses how SDMA 
channels are used to transfer data between the Ethernet channel and system memory. 


e Section 20.3, “NMSI Configuration,’ explains how clocks are routed to SCCs 
through the bank of clocks. 


e Chapter 27, “SCC Ethernet Mode,’ should be read next. 


e Chapter 34, “Parallel I/O Ports,’ shows how to configure the preferred Ethernet pin 
functions to be active. 


e Chapter 35, “CPM Interrupt Controller,’ defines SCC interrupt priorities and how 
interrupts are generated to the core. 
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27.4 Connecting the MPC850 to Ethernet 


The basic interface to the external EEST chip consists of the following Ethernet signals: 
e Receive clock (RCLK)—a CLK<x signal routed through the bank of clocks on the 
MPC850. 


e Transmit clock (TCLK)—a CLKx signal routed through the bank of clocks on the 
MPC850. Note that RCLK and TCLK should not be connected to the same CLKx 
since the EEST provides separate transmit and receive clock signals. 

e Transmit data (TXD)—the MPC850 TXD signal. 


e Receive data (RXD)—the MPC850 RXD signal. 


_ The following signals take on different functionality when the SCC is in Ethernet mode: 

e Transmit enable (TENA) —RTS becomes TENA. The polarity of TENA is active 
high, whereas the polarity of RTS is active low. 

¢ Receive enable (RENA)—CD becomes RENA. 

¢ Collision (CLSN)—CTS becomes CLSN. The carrier sense signal is referenced in 


Ethernet descriptions because it indicates when the LAN is in use. Carrier sense is 
defined as the logical OR of RENA and CLSN. | 


Figure 27-3 shows the basic components and signals required to make an Ethernet 
connection between the MPC850 and EEST. 











MPC850 EEST 
) MC68160 
SCG” AyD 
TENA (ATS) 
TCLK (CLKx) }e Passive | ies 
RXD 





RENA (CD) / 
RCLK (CLKx) | 
CLSN (CTS) 











Passive >| |-— AUI 





Parallel 1/O | 








——__—_—___—_—___—_—_—_—+———— Stored in Receive Buffer 


<—__—_————— Stored in Transmit Buffer er 
Start Frame | Destination Source Type/ | Frame Check 


7 Bytes 1 Byte 6 Bytes 6 Bytes 2 Bytes 46-1500 Bytes 4 Bytes 


NOTE: SHORT TX FRAMES ARE PADDED AUTOMATICALLY BY THE 5. 
Figure 27-3. Connecting the MPC850 to Ethernet 
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The EEST has similar names for its connection to the above seven MPC850 signals. The 
EEST also provides a loopback input so the MPC850 can perform external loopback 
testing, which can be controlled by any available MPC850 parallel I/O signal. The passive 
components needed to connect to AUI or twisted-pair media are external to the EEST. The 
MC68160 documentation describes EEST connection circuits. 


The MPC850 uses SDMA channels to store bytes received after the start frame delimiter in 
system memory. When sending, provide the destination address, source address, 
type/length field, and the transmit data. To meet minimum frame requirements, the 
MPC8S50 pads frames with fewer than 46 bytes in the data field and appends the FCS to the 
frame. 


27.5 SCC Ethernet Channel Frame Transmission 


The Ethernet transmitter works with almost no core intervention. When the core enables the 
transmitter, the SCC polls the first TxBD in the table every 128 serial clocks. Setting 
TODR[TOD] lets the next frame be sent without waiting for the next poll. 


To begin transmission, the SCC in Ethernet mode (called the Ethernet controller) fetches 
data from the buffer, asserts TENA to the EEST, and starts sending the preamble sequence, 
the start frame delimiter, and frame information. If the line is busy, it waits for carrier sense 
to remain inactive for 6.0 us, at which point it waits an additional 3.6 us before it starts 
sending (9.6 us after carrier sense originally became inactive). 


If a collision occurs during frame transmission, the Ethernet controller follows a specified 
backoff procedure and tries to retransmit the frame until the retry limit threshold is reached. 
The Ethernet controller stores the first 5 to 8 bytes of the transmit frame in internal RAM 
so they need not be retrieved from system memory in case of a collision. This improves bus 
usage and latency when the backoff timer output requires an immediate retransmission. If 
a collision occurs during frame transmission, the controller returns to the first buffer for a 
retransmission. The only restriction is that the first buffer must contain at least 9 bytes. 


Note that if an Ethernet frame consists of multiple buffers, do not reuse the first BD until 
the CPM clears the R bit of the last BD. 


When the end of the current BD is reached and TxBD[L] is set, the FCS bytes are appended 
(if the TC bit is set in the TxBD), and TENA is negated. This notifies the EEST of the need 
to generate the illegal Manchester encoding that marks the end of an Ethernet frame. After 
CRC transmission, the Ethernet controller writes the frame status bits into the BD and 
clears the R bit. When the end of the current BD is reached and the L bit is not set, only the 
R bit is cleared. 
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In either mode, whether an interrupt is issued depends on how the I bit is set in the TXBD. 
The Ethernet controller proceeds to the next TxBD. Transmission can be interrupted after 
each frame, after each buffer, or after a specific buffer is sent. The Ethernet controller can 
pad characters to short frames. If TxBD[PAD] is set, the frame is padded up to the value of 
the minimum frame length register (MINFLR). 


To send expedited data before previously linked buffers or for error situations, the 
GRACEFUL STOP TRANSMIT command can be used to rearrange transmit queue before the 
CPM sends all the frames; the Ethernet controller stops immediately if no transmission is 
in progress or it will keep sending until the current frame either finishes or terminates with 
a collision. When the Ethernet controller receives a RESTART TRANSMIT command, it 
resumes transmission. The Ethernet controller sends bytes least-significant bit first. 


27.6 SCC Ethernet Channel Frame Reception 


The Ethernet receiver handles address recognition and performs CRC, short frame, 
maximum DMA transfer, and maximum frame length checking with almost no core 
intervention. When the core enables the Ethernet receiver, it enters hunt mode as soon as 
RENA is asserted while CLSN is negated. In hunt mode, as data is shifted into the receive 
shift register one bit at a time, the register contents are compared to the contents of the 
SYN1 field in the data synchronization register (DSR). This compare function becomes 
valid a certain number of clocks after the start of the frame (depending on PSMR[NIB)). If 
the two are not equal, the next bit is shifted in and the comparison is repeated. If a 
double-zero or double-one fault is detected between bits 14 to 21 from the first received 
preamble bit, the frame is rejected. If a double-zero fault is detected after 21 bits from the 
first received preamble bit and before detection of the start frame delimiter (SFD), the frame 
is also rejected. When the incoming pattern is not rejected and matches the DSR, the SFD 
has been detected; hunt mode is terminated and character assembly begins. 


When the receiver detects the first bytes of the frame, the Ethernet controller performs 
address recognition on the frame. The receiver can receive physical (individual), group 
(multicast), and broadcast addresses. Ethernet receive frame data is not written to memory 
until the internal address recognition process completes, which improves bus usage with 
frames not addressed to this station. 


If a match is found, the Ethernet controller fetches the next RxBD and, if it is empty, starts 
transferring the incoming frame to the RxBD associated data buffer. If a collision is 
detected during the frame, the RxBDs associated with this frame are reused. Thus, there 
will be no collision frames presented to you except late collisions, which indicate serious 
LAN problems. When the data buffer has been filled, the Ethernet controller clears the E 
bit in the RxBD and generates an interrupt if the I bit is set. If the incoming frame exceeds 
the length of the data buffer, the Ethernet controller fetches the next RxBD in the table and, 
if it is empty, continues transferring the rest of the frame to this buffer. The RxBD length 1s 
determined by MRBLR in the SCC general-purpose parameter RAM, which should be at 
least 64 bytes. 
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During reception, the Ethernet controller checks for a frame that is either too short or too 
long. When the frame ends, the receive CRC field is checked and written to the buffer. The 
data length written to the last BD in the Ethernet frame is the length of the entire frame and 
it enables the software to correctly recognize the frame-too-long condition. 


The Ethernet controller then sets the L bit in the RxBD, writes the other frame status bits 
into the RxBD, and clears the E bit. Then it generates a maskable interrupt, which indicates 
that a frame has been received and is in memory. The Ethernet controller then waits for a 
new frame. It receives serial data least-significant bit first. 


27.7 SCC Ethernet Parameter RAM 


For Ethernet mode, the protocol-specific area of the SCC parameter RAM is mapped as in 
Table 27-1. 


Table 27-1. SCC Ethernet Parameter RAM Memory Map 
2 a __ LE ence 


0x30 ICPRES | PRES Preset CRC. For the 32-bit CRC-CCITT. initialize to OxFFEFFFFE 
0x34 a MASK Constant mask for CRC. For the 32-bit CRC-CCITT, initialized to OxDEBB20E3. 


0x38 eeeos Word |CRC error, alignment error, and discard frame counters. The CPM maintains these 
32-bit (modulo 2%) counters that can be initialized while the channel is disabled. 














Ox3C ALEC CRCEC is incremented for each received frame with a CRC error, not including 


| frames not addressed to the controller, frames received in the out-of-buffers 

0x40 ne i ; 
condition, frames with overrun errors, or frames with alignment errors. ALEC is 
incremented for frames received with dribbling bits, but does not include frames =| 
not addressed to the controller, frames received in the out-of-buffers condition, or 
frames with overrun errors. DISFC is incremented for frames discarded because of 

0x44 | PADS Hword 

0x46 | RET_LIM Hword | Retry limit. Number of retries (typically 15 decimal) that can be made to send a 
frame. An interrupt can be generated if the limit is reached. 

0x48 | RET_CNT Retry limit counter. Temporary down-counter for counting retries. 

Ox4A |MFLR Hword | Maximum frame length register (Typically 1518 decimal). The Ethernet controller 

checks the length of an incoming Ethernet frame against this limit. If it is exceeded, 
the rest of the frame is discarded and LG is set in the last BD of that frame. The 


the out-of-buffers condition or an overrun error. The CRC does not have to be 
controller reports frame status and length in the last BD. MFLR is defined as all 
0x4c | MINFLR 



















Short frame PAD character. Write the pad character pattern to be sent when short 
frame padding is implemented into PADS. The pattern may be of any value, but 
both the high and low bytes should be the same. 
















correct for DISFC to be incremented. 
in-frame bytes between the start frame delimiter and the end of the frame. 








Minimum frame length register. The Ethernet controller checks the incoming 
frame’s length against MINFLR (typically 64 decimal). If the received frame is 
smaller than MINFLR,, it is discarded unless PSMR[RSH] is set, in which case, SH 
is set in the last BD for the frame. For transmitting a frame that is too short, the 
Ethernet controller pads the frame to make it MINFLR bytes long, depending on 
how PAD is set in the TxBD and on the PAD value in the parameter RAM. 


we 
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Table 27-1. SCC Ethernet Parameter RAM Memory Map (Continued) 


Offset | Description 


Hword | Max DMAn length register. Gives the option to stop system bus writes after a 
frame exceeds a certain size. However, this value is valid only if an address match 
OxSO | MAXD2 Hword | is found. The Ethernet controller checks the length of an incoming Ethernet frame 
against this user-defined value (usually 1520 decimal). If this limit is exceeded, the 
rest of the incoming frame is discarded. The Ethernet controller waits until the end 
of the frame or until MFLR bytes are received and reports the frame status and the 
frame length in the last RxBD. 

MAXD1 is used when an address matches an individual or group address. MAXD2 
is used in promiscuous mode when no address match is detected. In a monitor 
station, MAXD2 can be much less than MAXD1 to receive entire frames 
addressed to this station, but only the headers of the other frames are received. 


Ox4E 


0x52. | MAXD Hword | Rx max DMA. 


0x54. |DMA_CNT Hword | Rx DMA counter. A temporary down-counter used to track frame length. 


0x54 |} MAX_B Hword 


Maximum BD byte count. 






0x58 |GADDR1 Hword | Group address filter 1-4. Used in the hash table function of the group addressing 
mode. Write zeros to these values after reset and before the Ethernet channel is 
enabled to disable all group hash address recognition functions. The SET GROUP 


ADDRESS Command is used to enable the hash table. 


Ox5A | GADDR2 | 
0Ox5C |GADDR3 
Ox5E | GADDR4 
0x60 ave area 0—current frame. 


TBUFO_DATAO | Word 


ep) 


0x64 | TBUFO_DATA1]|Word | Save area 1—current frame. 


0x68 Word 


TBUFO_RBAO 
Ox6C | TBUFO_CRC_ | Word 


0x70 | TBUFO_BCNT | Hword 


0x72 |PADDR1_H Hword | The 48-bit individual address of this station into this location. PADDR1_L is the 


lowest order hword and PADDR1_H is the highest order hword. 





0x74 |PADDR1_M 


0x76 |PADDR1_L 


0x78 Hword |} Persistence. Lets the Ethernet controller be less aggressive after a collision. 
Normally, 0x0000. It can be a value between 1 and 9 (1 is most aggressive). The 
value is added to the retry count in the backoff algorithm to reduce the chance of 


transmission on the next time slot. 
Note: Using P_PER is fully allowed in the Ethernet/802.3 specifications. A less 


aggressive backoff algorithm used by multiple stations on a congested Ethernet 
LAN increases overall throughput by reducing the chance of collision. PSMR[SBT] 
offers another way to reduce the aggressiveness of the Ethernet controller. 


Ox7A }|RFBD_PTR Hword | Rx first BD pointer. 


Ox7C | TFBD_PTR Hword | Tx first BD pointer. 


Ox7E |TLBD_PTR Hword | Tx last BD pointer. 


0x80 | TBUF1_DATAO|Word | Save area O—next frame. 


0x84 | TBUF1_DATA1|Word | Save area 1—next frame. 
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Table 27-1. SCC Ethernet Parameter RAM Memory Map (Continued) 


0x94 ADDRI Hword | Individual address filter 1-4. Used in the hash table function of the individual 
addressing mode. Zeros can be written to these values after reset and before the 

Ethernet channel is enabled to disable all individual hash address recognition 

functions. The SET GROUP ADDRESS command is used to enable the hash table. 




















0x96 |IADDR2 


0x98 |IADDR3 


0x9A |IADDR4 | 
0x9C_ |BOFF_CNT  Hword Backotfcounter 


Ox9E | TADDR_H | Hword | Allows addition and deletion of addresses from individual and group hash tables. 
| After placing an address in TADDR, issue a SET GROUP ADDRESS Command. 

TADDR_L (temp address low) is the least-significant half word and TADDR_H 

| (temp address high) is the most-significant half word. 












' From SCC base address. SCC base = IMMR + 0x3D00 (SCC2) or 0x3E00 (SCC3). 
















27.8 Programming the Ethernet Controller 


The core configures the SCC to operate as an Ethernet controller by setting GSMR[MODE] 
to 0b1100. Receive and transmit errors are reported through RxBD and TxBD. Several 
GSMR fields must be programmed to special values for Ethernet. Set DSR[S YN1] to 0x55 
and DSR[SYN2] to OxDE. The 6 bytes of preamble programmed in the GSMR, in 
combination with the DSR programming, causes 8 bytes of preamble on transmit 
(including the 1-byte start delimiter with the value OxDS). 


27.9 SCC Ethernet Commands 


Transmit and receive commands are issued to the CP command register (CPCR). 
Table 27-2 describes transmit commands. 
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Table 27-2. Transmit Commands 


Description 


STOP When used with the Ethernet controller, this command violates a specific behavior of an Ethernet/IEEE 
TRANSMIT 802.3 station. It should not be used. 


GRACEFUL Used to ensure that transmission stops smoothly after the current frame finishes or has a collision. 
STOP SCCE[GRA] is set once transmission stops, at which point Ethernet transmit parameters and their BDs 
TRANSMIT can be updated. TBPTR points to the next TxBD. Transmission begins once the R bit of the next BD is 
set and a RESTART TRANSMIT Command is issued. 
| Note that if GRACEFUL STOP TRANSMIT is issued and the current frame ends in a collision, TBPTR points 
to the start of the collided frame with the R bit still set in the BD. The frame looks as if it was never sent. 


RESTART Enables transmission of characters on the transmit channel. The Ethernet controller expects it after a 
TRANSMIT GRACEFUL STOP TRANSMIT Command is issued or a transmitter error. The Ethernet controller resumes 
transmission from the current TBPTR in the channel TxBD table. 


INIT TX Initializes transmit parameters in this serial channel parameter RAM to reset state. Issue only when the 
PARAMETERS | transmitter is disabled. INIT TX and RX PARAMETERS resets both transmit and receive parameters. 





Table 27-3 describes receive commands. 


Table 27-3. Receive Commands 


ENTER HUNT | After hardware or software is reset and the channel is enabled in GSMR_L, the channel is in receive 
enable mode and uses the first BD in the table. The receiver then enters hunt mode, waiting for an 
incoming frame. The ENTER HUNT MODE command is generally used to force the Ethernet receiver to 
stop receiving the current frame and enter hunt mode, in which the Ethernet controller continually 
scans the input data stream for a transition of carrier sense from inactive to active and then a preamble 
sequence followed by the start frame delimiter. After receiving the command, the buffer is closed and 
the CRC calculation is reset. The next RxBD is used to receive more frames. 


Should not be used with the Ethernet controller. 


INIT RX Initializes receive parameters in this serial channel parameter RAM to their reset state. Issue it only 
PARAMETERS | when the receiver is disabled. INIT TX and RX PARAMETERS resets receive and transmit parameters. 


SET GROUP | Used to set one of the 64 bits of the four individual/group address hash filter registers. The address to 

ADDRESS be added to the hash table should be written to TADDR_L, TADDR_M, and TADDR_H in the parameter 
RAM before executing this command. The CP uses an individual address if the I/G bit in the address 
stored in TADDR is 0; otherwise, it uses a group address. This command can be executed at any time, 
regardless of whether the Ethernet channel is enabled. 
To delete an address from the hash table, disable the Ethernet channel, clear the hash table registers, 
and execute this command for the remaining addresses. Do not simply clear the channel’s associated 
hash table bit because the hash table may have multiple addresses mapped to the same hash table bit. 





Note that after a CPM reset via CPCR[RST], the Ethernet transmit enable (TENA) signal 
defaults to its RTS, active-low functionality. To prevent false TENA assertions to an 
external transceiver, configure TENA as an input before issuing a CPM reset. See step 3 in 
Section 27.21, “SCC Ethernet Programming Example.” 
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27.10 SCC Ethernet Address Recognition 


The Ethernet controller can filter received frames based on different addressing types — 
physical (individual), group (multicast), broadcast (all-ones group address), and 
promiscuous. The difference between an individual address and a group address is 
determined by the I/G bit in the destination address field. A flowchart for address 
recognition on received frames is shown in Figure 27-4. 


In the physical type of address recognition, the Ethernet controller compares the destination 
address field of the received frame with the user-programmed physical address in PADDR1. 
Address recognition can be performed on multiple individual addresses using the 
[ADDR 1-4 hash table. 7 


Check Address 












/G Address 
7) 
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Multiple IND 
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False 
B Hash Search Hash_Search 
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Figure 27-4. Ethernet Address Recognition Flowchart 
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In group address recognition, the controller determines whether the group address is a 
broadcast address. If broadcast addresses are enabled, the frame is accepted, but if the 
group address is not a broadcast address, address recognition can be performed on multiple 
group addresses using the GADDRn hash table. In promiscuous mode, the controller 
receives all incoming frames regardless of their address. 


27.11 Hash Table Algorithm 


Individual and group hash filtering operate using certain processes. The Ethernet controller 
maps any 48-bit address into one of 64 bins, each represented by a bit stored in GADDRx 
or IADDRx. When a SET GROUP ADDRESS command is executed, the Ethernet controller 
maps the selected 48-bit address into one of the 64 bits by passing the 48-bit address 
through the on-chip 32-bit CRC generator and selecting 6 bits of the CRC-encoded result 
to generate a number between 1 and 64. Bits 31-30 of the CRC result select one of the 
GADDRs or IADDRs; bits 29-26 of the CRC result indicate the bit in that register. 


When the Ethernet controller receives a frame, the same process is used. If the CRC 
generator selects a bit that 1s set in the group/individual hash table, the frame is accepted. 
Otherwise, it is rejected. So, if eight group addresses are stored in the hash table and 
random group addresses are received, the hash table prevents roughly 56/64 (87.5%) of the 
group address frames from reaching memory. Frames that reach memory must be further 
filtered by the processor to determine if they contain one of the eight preferred addresses. 


Better performance is achieved by using the group and individual hash tables 
simultaneously. For instance, if eight group and eight physical addresses are stored in their 
respective hash tables, 87.5% of all frames are prevented from reaching memory. The 
effectiveness of the hash table declines as the number of addresses increases. For instance, 
with 128 addresses stored in a 64-bin hash table, the vast majority of the hash table bits are 
set, thus preventing a small fraction of the frames from reaching memory. 


Hash tables cannot be used to reject frames that match a set of entered addresses because 
unintended addresses are mapped to the same bit in the hash table. 


27.12 Interpacket Gap Time 


The receiver receives back-to-back frames with a minimum interpacket spacing of 9.6 us. 
In addition, after the backoff algorithm, the transmitter waits for carrier sense to be negated 
before resending the frame. Retransmission begins 9.6 us after carrier sense is negated if it 
stays negated for at least 6.4 us. 


27.13 Handling Collisions 


If a collision occurs as a frame is being sent, the Ethernet controller continues sending for 
at least 32 bit times, thus sending a JAM pattern of 32 ones. If a collision occurs during the 
preamble sequence, the JAM pattern is sent at the end of the sequence. 
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If a collision occurs within 64 byte times, the retry process is initiated. The transmitter waits 
a random number of slot times (512 bit times or 52 us). If a collision occurs after 64 byte 
times, no retransmission is performed and the buffer is closed with an LC error indication. 
If a collision occurs while a frame is being received, reception stops. This error is reported 
only in the BD if the length of the frame exceeds MINFLR or if PSMR[RSH] = 1. 


27.14 Internal and External Loopback 


Both internal and external loopback are supported by the Ethernet controller. In loopback 
mode, both of the SCC FIFOs are used and the channel actually operates in a full-duplex 
fashion. Both internal and external loopback are configured using combinations of 
PSMR[LPB] and GSMR[DIAG]. Because of the full-duplex nature of the loopback 
operation, the performance of the other SCC is degraded. 


Internal loopback disconnects the SCC from the serial interface. Receive data is connected 
to the transmit data and the receive clock is connected to the transmit clock. Both FIFOs 
are used. Data from the transmit FIFO is received immediately into the receive FIFO. There 
is no heartbeat check in this mode; configure TENA as a general-purpose output. That is, 
set PCDIR[15], and clear PCPAR[15], PCDAT[15], and PSMR[HBC]. 


In external loopback operation, the Ethernet controller listens for data being received from 
the EEST at the same time that it is sending. 


27.15 Full-Duplex Ethernet Support 


To run full-duplex Ethernet, select loopback and full-duplex Ethernet modes in the SCC’s 
protocol-specific mode register, (PSMR[LPB, FDE] = 1). The loopback mode tells the 
Ethernet controller to accept received frames without signaling a collision. Setting 
PSMR[FDE] tells the controller that it can send while receiving without waiting for a clear 
line (carrier sense). 


27.16 Handling Errors in the Ethernet Controller 


The Ethernet controller reports frame reception and transmission error conditions using 
channel BDs, error counters, and SCCE. Table 27-4 describes transmission errors. 


Table 27-4. Transmission Errors 


Transmitter underrun | If this error occurs, the channel sends 32 bits that ensures a CRC error, stops sending the 
buffer, closes it, sets the UN bit in the TxBD and SCCE[TXE]. The channel resumes 
transmission after it receives a RESTART TRANSMIT command. 


Carrier sense lost When this error occurs and no collision is found in the frame, the channel sets the CSL bit in 
during frame the TxBD, sets SCCE[TXE], and continues sending the buffer normally. No retries are 
transmission performed after this error occurs. Carrier sense is the logical OR of RENA and CLSN. 
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Table 27-4. Transmission Errors (Continued) 
ee 
Retransmission The channel stops sending the buffer, closes it, sets the RL bit in the TxBD and SCCE[TXE]. 

attempts limit expired | The channel resumes transmission after it receives a RESTART TRANSMIT Command. 


Late collision When this error occurs, the channel stops sending the buffer, closes it, sets SCCE[TXE] and 
the LC bit in the TxBD. The channel resumes transmission after it receives the RESTART 
TRANSMIT Command. This error is discussed further in the definition of PSMR[LCW]. 



















Heartbeat 





Some transceivers have a heartbeat (signal-quality error) self-test. To signify a good self-test, 
the transceiver indicates a collision to the MPC850 within 20 clocks after the Ethernet 
controller sends a frame. This heartbeat condition does not imply a collision error, but that the 
transceiver seems to be functioning properly. lf SCCE[HBC] = 1 and the MPC850 does not 
detect a heartbeat condition after sending a frame, a heartbeat error occurs; the channel 
closes the buffer, sets the HB bit in the TxBD, and generates the TXE interrupt if it is enabled. 


Table 27-4 describes reception errors. 


Table 27-5. Reception Errors 


cn 


Overrun The Ethernet controller maintains an internal FIFO for receiving data. When it overruns, the channel 
writes the received byte over the previously received byte. The previous byte and frame status are lost. 
The channel closes the buffer, sets RxBD[OV] and SCCE[RXF], and increments the discarded frame 
counter (DISFC). The receiver then enters hunt mode. 


Busy A frame was received and discarded because of a lack of buffers. The channel sets SCCE[BSY] and 
increments DISFC. The receiver then enters hunt mode. 


Non-Octet | The Ethernet controller handles up to seven dribbling bits when the receive frame terminates nonoctet 
Error aligned. It checks the CRC of the frame on the last octet boundary. If there is a CRC error, a frame 
(Dribbling | nonoctet aligned error is reported, SCCE[RXF] is set, and the alignment error counter is incremented. If 
Bits) there is no CRC error, no error is reported. The receiver then enters hunt mode. 


When a CRC error occurs, the channel closes the buffer, sets SCCE[RXF] and CR in the RxBD, and 
increments the CRC error counter (CRCEC). After receiving a frame with a CRC error, the receiver enters 
hunt mode. CRC checking cannot be disabled, but CRC errors can be ignored if checking is not required. 





27.17 Ethernet Mode Register (PSMR) 


In Ethernet mode, the protocol-specific mode register (PSMR), shown in Figure 27-5, is 
used as the Ethernet mode register. 


ec| Fo [st | or jro| ser|ire| — [row] wis [roe 


0000_0000_0000_0000 


0xA28 (PSMR2), 0xA48 (PSMR3) 
Figure 27-5. Ethernet Mode Register (PSMR) 
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Table 27-6 describes PSMR fields. 
Table 27-6. PSMR Field Descriptions 


cee Pee 


HBC | Heartbeat checking. 
0 No heartbeat checking is performed. Do not wait for a collision after transmission. 
1 Wait 20 transmit clocks or 2 us for a collision asserted by the transceiver after transmission. The HB 


bit in the TxBD is set if the heartbeat is not heard within 20 transmit clocks. 














Force collision. 
0 Normal operation. 

1 The channel forces a collision when each frame is sent. To test collision logic configure the MPC850 
in loopback operation. In the end, the retry limit for each transmit frame is exceeded. 







Receive short frames. 
0 Discard short frames that are not as long as MINFLR. 
1 Receive short frames. 











Individual address mode. : 
0 Normal operation. A single 48-bit physical address in PADDR1 is checked when it is received. 
1 The individual hash table is used to check all individual addresses that are received. 






CRC selection. Only CRC = 10 is valid. Complies with Ethernet specifications. 32-bit CCITT-CRC. 
X32 + X26 + X23 + X22 + X16 + X12 + X11 + X10 + XB + X7 + XH + X44 X2 4+ X1 +1. 








Promiscuous. | 
0 Check the destination address of incoming frames. 
1 Receive the frame regardless of its address unless REJECT is asserted as it is being received. 









Broadcast address. 
O Receive all frames containing the broadcast address. 
1 Reject all frames containing the broadcast address, unless PRO = 1. 













Stop backoff timer. 
0 The backoff timer is functioning normally. , 

1 The backoff timer for the random wait after a collision is stopped when carrier sense is active. 
Retransmission is less aggressive than the maximum allowed in IEEE 802.3. The persistence 
(P_PER) feature in the parameter RAM can be used in combination with or in place of SBT. 





LPB j|Loopback operation. 
0 Normal operation. 
1 External loopback is used if GSMR[DIAG] is set for normal operation; internal loopback is used if 


DIAG is configured for loopback operation. 


fo |— | Reserved. Should be cleared. 


11 LCW | Late collision window. 
0 A late collision is any collision that occurs at least 64 bytes from the preamble. 


1 A late collision is any collision that occurs at least 56 bytes from the preamble. 


12-14 Number of ignored bits. Determines how soon after RENA assertion the Ethernet controller should 
begin looking for the start frame delimiter. Typically NIB = 101 (22 bits). 
000 Begin searching 13 bits after the assertion of RENA. 
001 Begin searching 14 bits after the assertion of RENA. 


111 Begin searching 24 bits after the assertion of RENA. 


Full duplex Ethernet. 
0 Disable full-duplex Ethernet mode. 
1 Enable full-duplex Ethernet mode. 


Note: When FDE = 1, PSMR[LPB] must be set also. 
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27.18 SCC Ethernet Receive Buffer Descriptor 


The Ethernet controller uses the RxBD to report on the received data for each buffer. 


Data Length 









Rx Data Buffer Pointer 


Figure 27-6. SCC Ethernet Receive RxBD 


Table 27-7 describes RxBD status and control fields. 


Table 27-7. SCC Ethernet Receive RxBD Status and Control Field 
Descriptions 







Empty. 
0 The buffer is full or stopped receiving data because an error occurred. The core can read or write any 


fields of this RxBD. The CPM does not use this BD as long as the E bit is zero. 
1 The paler is not full. The CPM controls this BD and its buffer; do not modify this BD. 











Wrap (final BD in table). 
0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM receives incoming data into the first BD that 
RBASE points to. The number of BDs is determined only by the W bit and overall space constraints of 
the dual-port RAM. 













Interrupt. Note that this bit does not mask SCCE[RXF] interrupts. 
0 No SCCE[RXB] interrupt is generated after this buffer is used. 
1 SCCE[RXB] or SCCE[RXF] is set when this buffer is used by the Ethernet controller. These two bits 
can cause interrupts if they are enabled. 











Last in frame. The Ethernet controller sets this bit when this buffer is the last one in a frame, which 
occurs when the end of a frame is reached or an error is received. In the case of error, one or more of 
the CL, OV, CR, SH, NO, and LG bits are set. The Ethernet controller writes the number of frame octets 
to the data length field. 

O The buffer is not the last one in a frame. 

1 The buffer is the last one in a frame. 









| First in frame. The Ethernet controller sets this bit when this buffer is the first one in a frame. 
O The buffer is not the first one in a frame. 
1 The buffer is the first one in a frame. 


Reserved, should be cleared. 


Miss. (valid only if L = 1) The Ethernet controller sets M for frames that are accepted in promiscuous 
| mode, but are flagged as a miss by internal address recognition. Thus, in promiscuous mode, M 
determines whether a frame is destined for this station. 

0 The frame is received because of an address recognition hit. 

1 The frame is received because of promiscuous mode. 


Reserved, should be cleared. 
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Table 27-7. SCC Ethernet Receive RxBD Siatus and Control Field 
Descriptions (Continued) 


| Rx frame length violation. Set when a frame length greater than the maximum defined for this channel 
has been recognized. Only the maximum number of bytes allowed is written to the buffer. 










Rx nonoctet-aligned frame. Set when a frame containing a number of bits not divisible by eight is 
received. Also, the CRC check that occurs at the preceding byte boundary generated an error. 


Short frame. Set if a frame smaller than the minimum defined for this channel was recognized. Occurs 
if PSMR[RSH] = 1. 


Rx CRC error. set when a frame contains a CRC error. 
V Overrun. Set when a receiver overrun occurs during frame reception. 


Collision. This frame is closed because a collision occurred during frame reception. CL is set only if a 
late collision occurs or if PSMR[RSH] is enabled. Late collisions are better defined in PSMR[LCW]. 









Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 


Descriptors (BDs).” Data length includes the total number of frame octets (including four 
bytes for CRC). 


Figure 27-7 shows an example of how RxBDs are used in receiving. 
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Receive BD 0 MRBLR = 64 Bytes for this SCC 
E L F Buffer 
Status Destination Address (6) A 
Length 0x0040 ee Source Address (6) 
Pointer 32-Bit Buffer Pointer Buffer Full Type/Length (2) 64 Bytes 
Data Bytes (50) 
i aoe 
Receive BD i 
Ee L oF Buffer 
Status A 
Length 0x0045 CRC Bytes (4) 
Pointer 32-Bit Buffer Pointer Buffer Closed Tag Byte (1) 64 Bytes 
after CRC Received. 
Optional Tag Byte 
Appended 
Receive BD 2 
E Buffer 


Status 
Length 









Old Data from 
Collided Frame will 
be Overwritten 






XXXX 



















Collision 
Causes Buffer 
to be Reused 


Pointer 32-Bit Buffer Pointer 





Receive BD 3 


E Buffer 


Status 
Length XXXX 








Pointer 32-Bit Buffer Pointer Buffer 
Still Empty 





Non-Collided Ethernet Frame 1 Line Idle 


Two Frames t 
Received in Ethernet 
Collision Present 


Time ——-> Time 


Figure 27-7. Ethernet Receiving using RxBDs 


27.19 SCC Ethernet Transmit Buffer Descriptor 


Data is sent to the Ethernet controller for transmission on an SCC channel by arranging it 
in buffers referenced by the channel TxBD table. The Ethernet controller uses TxBDs to 
confirm transmission or indicate errors so the core knows buffers have been serviced. 
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Data Length 


Tx Data Buffer Pointer 





Figure 27-8. SCC Ethernet TxBD 
Table 27-8 describes TxBD status and control fields. 


Table 27-8. SCC Ethernet Receive TxBD Status and Control Field 
Descriptions 


Ready. 

0 The buffer is not ready for transmission. The user can update this BD or its data buffer. The CPM 
clears R after the buffer has been sent or after an error occurs. 

1 The user-prepared buffer has not been sent or is currently being sent. Do not modify this BD. 


Short frame padding. Valid only when L is set. Otherwise, it is ignored. 

0 Do not add PADs to short frames. 

1 Add PADs to short frames. Pad bytes are inserted until the length of the sent frame equals the 
MINFLR and they are stored in PADs in the parameter RAM. 


Wrap (final BD in table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM receives incoming data into the first BD that 
TBASE points to in the table. The number of TxBDs in this table is determined only by the W bit and 
overall space constraints of the dual-port RAM. 

Note: The TxBD table must contain more than one BD in Ethernet mode. 


Interrupt. 

0 No interrupt is generated after this buffer is serviced. 

1 SCCE[TXB] or SCCE[TXE] is set after this buffer is serviced. These bits can cause interrupts if they 
are enabled. 


Last. 
O Not the last buffer in the transmit frame. 
1 Last buffer in the transmit frame. 


Tx CRC. Valid only when L = 1. Otherwise, it is ignored. 
0 End transmission immediately after the last data byte. 
1 Transmit the CRC sequence after the last data byte. 


Defer indication. The frame was deferred before being sent successfully, that is, the transmitter had to 
wait for carrier sense before sending because the line was busy. This is not a collision indication; 
collisions are indicated in RC. 


Heartbeat. Set when the collision input was not asserted within 20 transmit clocks after transmission. 
HB cannot be set unless PSMR[HBC] = 1. The SCC writes HB after it finishes sending the buffer. 


Late collision. Set when a collision occurred after the number of bytes defined for PSMR[LCW] are 
sent. The Ethernet controller stops sending and writes this bit after it finishes sending the buffer. 


Retransmission limit. Set when the transmitter fails (Retry Limit + 1) attempts to successfully transmit 
a message because of repeated collisions on the medium. The Ethernet controller writes this bit after 
it finishes attempting to send the buffer. 
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Table 27-8. SCC Ethernet Receive TxBD Status and Control Field 
Descriptions (Continued) 


fee ele 


10-13} RC | Retry count. Indicates the number of retries required before the frame was sent successfully. lf RC = 
0, the frame was sent correctly the first time. If RC = 15 and RET_LIM = 15 in the parameter RAM, 15 
retries were required. Because the counter saturates at 15, if RC = 15 and RET_LIM > 15, then 15 or 
more retries were required. The controller writes this field after it successfully sends the buffer. 


14 UN | Underrun. Set when the Ethernet controller encounters a transmitter underrun while sending the 
buffer. The Ethernet controller writes UN after it finishes sending the buffer. 


Carrier sense lost. Set when carrier sense is lost during frame transmission. The Ethernet controller 
writes CSL after it finishes sending the buffer. 





Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).” 


27.20 SCC Ethernet Event Register (SCCE)/Mask 
Register (SCCM) 


The SCC event register (SCCE) is used as the Ethernet event register to generate interrupts 
and report events recognized by the Ethernet channel. When an event is recognized, the 
Ethernet controller sets the corresponding SCCE bit. Interrupts are enabled by setting, and 
masked by clearing, the equivalent bits in the Ethernet mask register (SCCM). SCCE bits 
are cleared by writing ones; writing zeros has no effect. All unmasked bits must be cleared 
before the CPM clears the internal interrupt request. 


EEE 
0000_0000_0000_0000 


de 0xA30 (SCCE2)/0xA34 (SCCM2); OxA50 (SCCE3)/0xA54 (SCCM3) 
Figure 27-9. SCC Ethernet Event Register (SCCE)/Mask Register (SCCM) 








Table 27-9 describes SCCE and SCCM fields. 
Table 27-9. SCCE/SCCM Field Descriptions 


Reserved, should be cleared. 


Graceful stop complete. Set as soon the transmitter finishes any frame that was in progress when a 
GRACEFUL STOP TRANSMIT command was issued. It is set immediately if no frame was in progress. 


iin Reserved, should be cleared. 
Set when an error occurs on the transmitter channel. 
Rx frame. Set when a complete frame has been received on the Ethernet channel. 
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Table 27-9. SCCE/SCCM Field Descriptions (Continued) 






Busy condition. Set when a frame is received and discarded due to a lack of buffers. 
Tx buffer. Set when a buffer has been sent on the Ethernet channel. 
RXB | Rx buffer. Set when a buffer that was not a complete frame was received on the Ethernet channel. 


Figure 27-10 shows an example of interrupts that can be generated in Ethernet protocol. 











Frame 

Received in Ethernet Stored in 8x But 
0 er 

Time red in Rx Bu > | 
PX Lneide ——-[P [srofoaTsalm] 6 [on] 4 —_Lneld 
RENA 
Ethernet SCCE RXB | RXF 

Events 
NOTES: 


1. RXB event assumes receive buffers are 64 bytes each. 
2. The RENA events, if required, must be programmed in the port C parallel I/O, not in the SCC itself. 
3. The RxF interrupt may occur later than RENA due to receive FIFO latency. 





Frame in Tx Buff 
Transmitted by Ethernet ~- Seed cpu i 


TXD Line dle |p |sro[pa|sa|m| Dd {cri Line Idle 
' t 


TENA | | 


CLSN 





Ethernet SCCE 


Events TXB _ TXB, GRA. 


NOTES: 
1. TXB events assume the frame required two transmit buffers. 
2. The GRA event assumes a GRACEFUL STOP TRANSMIT command was issued during frame transmission. 
3. The TENA or CLSN events, if required, must be programmed in the port C parallel I/O, not in the SCC itself. 


LEGEND: 
P = Preamble, SFD = Start frame delimiter, DA and SA = Source/Destination address, 
T/L = Type/Length, D = Data, CR = CRC bytes 


Figure 27-10. Ethernet Interrupt Events Example 


Note that the SCC status register (SCCS) cannot be used with the Ethernet protocol. The 
current state of the RENA and CLSN signals can be found in port C. 
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27.21 SCC Ethernet Programming Example 


The following is an initialization sequence for the SCC2 in Ethernet mode. The CLK1 pin 
is used for the Ethernet receiver and CLK2 is used for the transmitter. 


1. Configure port A to enable TXD2 and RXD2. Set PAPAR[12, 13] and clear 
PADIR[12, 13] and PAODR[12]. 


2. Configure port C to enable CTS2 (CLSN) and CD2 (RENA). Clear PCPAR[8, 19] 
and PCDIR[8, 9] and set PCSO[8, 9]. 


3. Do not enable the RTS2 (TENA) pin yet because it is still functioning as RTS and 
transmission on the LAN could begin accidentally. 


4. Configure port A to enable the CLK1 and CLK2 pins. Set PAPAR[6, 7] and clear 
PADIR[6, 7]. 


5. Connect CLK1 and CLK2 to SCC2 using the serial interface. Set SICR[R2CS] to 
0b101 and SICR[T2CS] to 0b100. 


6. Connect the SCC2 to the NMSI and clear SICR[SC2]. 
7. Initialize the SDMA configuration register (SDCR) to 0x0001. 


8. Write RBASE and TBASE in the SCC2 parameter RAM to point to the RxBD and 
TxBD in the dual-port RAM. Assuming one RxBD at the beginning of the dual-port 
RAM and one TxBD following that RxBD, write RBASE with 0x0000 and TBASE 
with O0x0008. 


9. Program the CPCR to execute an INIT RX AND TX PARAMETERS command for this 
channel. 


10. Write RFCR and TFCR with 0x10 for normal operation. 


11.Write MRBLR with the maximum number of bytes per receive buffer. Here, assume 
1520 bytes, so MRBLR = Ox05FO0. In this example, the user wants to receive an 
entire frame into one buffer, so MRBLR is the first value larger than 1518 evenly 
divisible by four. 


12. Write C_PRES with OxFFFF_FFFF to comply with 32-bit CCITT-CRC. 
13.Write C_MASK with 0xDEBB_20E3 to comply with 32-bit CCITT-CRC. 
14.Clear CRCEC, ALEC, and DISFC for clarity. 

15.Write PAD with 0x8888 for the PAD value. 

16. Write RET_LIM with OxOOOF. 

17. Write MFLR with OxOSEE to make the maximum frame size 1518 bytes. 
18. Write MINFLR with 0x0040 to make the minimum frame size 64 bytes. 


19. Write MAXD1 and MAXD?2 with 0xO5FO to make the maximum DMA count 1520 
bytes. 


20.Clear GADDR1—GADDR4. The group hash table is not used. 


21.Write PADDR1_H with 0x0380, PADDR1_M with 0x12E0, and PADDR1_L with 
0x5634 to configure the physical address 0x8003_E012_3456. 
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22.Clear P_PER. It is not used. 
23.Clear IADDR1-IADDR4. The individual hash table is not used. 
24.Clear TADDR_H, TADDR_M, and TADDR_L for clarity. 


25. Initialize the RxBD and assume the Rx data buffer is at O0xO000_1000 in main 
memory. Write OxB000 to RxBD[Status and Control], 0OxO000 to RxBD[Data 
Length] (optional), and Ox0000_1000 to RxBD[Buffer Pointer]. 


26. Initialize the TxBD and assume the Tx data frame is at OxO000_2000 in main 
memory and contains fourteen 8-bit characters (destination and source addresses 
_ plus the type field). Write OxFCO0 to TxBD[Status and Control], add PAD to the 
frame and generate a CRC. Then write OxO00D to TxBD[Data Length] and 
0x0000_2000 to TxBD[Buffer Pointer]. 


27.Write OXFFFF to the SCCE register to clear any previous events. 
28. Write OxO01A to the SCCM register to enable the TXE, RXF, and TXB interrupts. 


29. Write 0x2000_0000 to the CIMR so that SCC2 can generate a system interrupt. The 
CICR register should also be initialized. 


30. Write 0x0000_0000 to GSMR_H2 to enable normal operation of all modes. 


31. Write 0x1088_O00C to the GSMR_L2 register to configure CTS (CLSN) and CD 
(RENA) to automatically control transmission and reception (DIAG bits) and the 
_ Ethernet mode. TCI is set to allow more setup time for the EEST to receive the 
MPC$850 transmit data. TPL and TPP are set for Ethernet requirements. The DPLL 
is not used with Ethernet. Note that the ENT and ENR are not enabled yet. 


32. Write 0xD555 to the DSR. 


33.Set the PSMR2 to OxOAOA to configure 32-bit CRC, promiscuous mode, and begin 
searching for the start frame delimiter 22 bits after RENA. 


34. Enable the TENA pin (RTS). Since GSMR[MODE] are written to Ethernet, the 
TENA signal is low. Set PCPAR[14] and clear PCDIR[14]. 


35. Write 0x1088_003C to GSMR_L2 to enable the SCC2 transmitter and receiver. This 
additional write ensures that ENT and ENR are enabled last. 


After 14 bytes and the 46 bytes of automatic pad (plus the 4 bytes of CRC) are sent, the 
TxBD 1s closed. Additionally, the receive buffer is closed after a frame is received. Any data 
received after 1520 bytes or a single frame causes a busy (out-of-buffers) condition because 
only one RxBD is prepared. 
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Transparent mode (also called totally transparent or promiscuous mode) provides a clear 
channel on which the SCC can send or receive serial data without bit-level manipulation. 
Software implements protocols run over transparent mode. An SCC in transparent mode 
functions as a high-speed serial-to-parallel and parallel-to-serial converter. 


Transparent mode can be used for serially moving data that requires no superimposed 
protocol, for applications that require serial-to-parallel and parallel-to-serial conversion for 
communication among chips on the same board, and for applications that require data to be 
switched without interfering with the protocol encoding itself, such as when data from a 
high-speed time-multiplexed serial stream is multiplexed into low-speed data streams. The 
concept is to switch the data path without altering the protocol encoded on that data path. 


Transparent mode is configured in the GSMR; see Section 21.2.1, “General SCC Mode 
Register (GSMR).” Transparent mode is selected in GSMR_H[TTX, TRX] for the 
transmitter and receiver, respectively. Setting both bits enables full-duplex transparent 
operation. If only one is set, the other half of the SCC uses the protocol specified in 
GSMR_L[MODE]. This allows loop-back modes to DMA data from one memory location 
to another while data is converted to a specific serial format. 


The SCC operations are asynchronous with the core and can be synchronous or 
asynchronous with other SCCs. Each clock can be supplied from the internal baud rate 
generator bank, DPLL output, or external pins. 


The SCC can work with the time-slot assigner (TSA) or nonmultiplexed serial interface 
(NMSI) and supports modem lines with the general-purpose I/O pins. Data can be 
transferred either the msb or Isb first in each octet. 


28.1 Features 
The following list summarizes the main features of the SCC in transparent mode: 
e Flexible buffers 
e Automatic SYNC detection on receive 
e CRCs can be sent and received 
e Reverse data mode 
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e Another protocol can be performed on the other half of the SCC 
¢ MC68360-compatible SYNC options 


28.2 SCC Transparent Channel Frame Transmission 
Process 


The transparent transmitter is designed to work almost no intervention from the core. When 
the core enables the SCC transmitter in transparent mode, it starts sending idles, which are 
logic high or encoded ones, as programmed in GSMR_L[TEND]. The SCC polls the first 
BD in the TxBD table. When there is a message to send, the SCC fetches data from 
memory, loads the transmit FIFO, and waits for transmitter synchronization, which is 
achieved with CTS or by waiting for the receiver to achieve synchronization, depending on 
GSMR_H[TXSY]. Transmission begins when transmitter synchronization is achieved. 


When all BD data has been sent, if TxBD[L] is set, the SCC writes the message status bits 
into the BD, clears TxBD[R], and sends idles until the next BD is ready. If it is ready, some 
idles are still sent. The transmitter resumes sending only after it achieves synchronization. 


If TxBD[L] is cleared when the end of the BD is reached, only TxBD[R] is cleared and the 
transmitter moves immediately to the next buffer to begin transmission with no gap on the 
serial line between buffers. Failure to provide the next buffer in time causes a transmit 
underrun which sets SCCE[TXE]. 


In both cases, an interrupt is issued according to TxBD[I]. By appropriately setting 
TxBD[I] in each BD, interrupts are generated after each buffer or group of buffers is sent. 
The SCC then proceeds to the next BD in the table and any whole number of bytes can be 
sent. If GSMR_H[REVD}] is set, the bit order of each byte is reversed before being sent; the 
msb of each octet is sent first. 


Setting GSMR_H[TFL] makes the transmit FIFO smaller and reduces transmitter latency, 
but it can cause transmitter underruns at higher transmission speeds. An optional CRC, 
selected in GSMR_H[TCRC], can be appended to each transparent frame if it is enabled in 
the TxBD. 


When the time-slot assigner (TSA) is used with a transparent-mode channel, 
synchronization is provided by the TSA. There is a start-up delay for the transmitter, but 
delays will always be some whole number of complete TSA frames. This means that n-byte 
transmit buffers can be mapped directly into n-byte time slots in the TSA frames. 


28.3 SCC Transparent Channel Frame Reception 
Process 


When the core enables the SCC receiver in transparent mode, it waits to achieve 
synchronization before data is received. The receiver can be synchronized to the data by a 
synchronization pulse or SYNC pattern. 
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After a buffer is full, the SCC clears RxBD[E] and generates a maskable interrupt if 
RxBD[I] is set. It moves to the next RxBD in the table and begins moving data to its buffer. 
If the next buffer is not available, SCCE[BSY] signifies a busy signal that can generate a 
maskable interrupt. The receiver reverts to hunt mode when an ENTER HUNT MODE 
command or an error is received. If GSMR_H[REVD] is set, the bit order of each byte is 
reversed before it is written to memory. 


Setting GSMR_H[RFW] reduces receiver latency by making the receive FIFO smaller, 
which may cause receiver overruns at higher transmission speeds. The receiver always 
checks the CRC of the received frame, according to GSMR_H|TCRC]. If a CRC is not 
required, resulting errors can be ignored. 


28.4 Achieving Synchronization in Transparent Mode 


Once the SCC transmitter is enabled for transparent operation, the TxBD is prepared and 
the transmit FIFO is preloaded by the SDMA channel, another process must occur before 
data can be sent. It is called transmit synchronization. Similarly, once the SCC receiver is 
enabled for transparent operation in the GSMR and the RxBD is made empty for the SCC, 
receive synchronization must occur before data can be received. An in-line synchronization 
pattern or an external synchronization signal can provide bit-level control of the 
synchronization process when sending or receiving. 


28.4.1 Synchronization in NMSI Mode 


The following sections describe synchronization in NMSI mode. 


28.4.1.1 In-Line Synchronization Pattern 


The transparent channel can be programmed to receive a synchronization pattern. This 

pattern is defined in the data synchronization register, DSR; see Section 21.2.3, “Data 
Synchronization Register (DSR).’ Pattern length is specified in GSMR_H[SYNL], as 
shown in Table 28-1. See also Section 21.2.1, “General SCC Mode Register (GSMR).” 


Table 28-1. Receiver SYNC Pattern Lengths of the DSR 


GSMR_H[SYNL] Bit Assignments 


ae + aa Scapa ASSIST ELOSA 
An external SYNC signal is used instead of the SYNC pattern in the DSR. 





If a 4-bit SYNC is selected, reception begins as soon as these four bits are received, 
beginning with the first bit following the 4-bit SYNC. The transmitter synchronizes on the 
receiver pattern if GSMR_H[RSYN] = 1. 
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Note that the transparent controller does not automatically send the synchronization 
pattern; therefore, the synchronization pattern must be included in the transmit buffer. 


28.4.1.2 External Synchronization Signals 


If GSMR_H[SYNL] is 0b00, the transmitter uses CTS and the receiver uses CD to os 
the sequence. These signals share two options — pulsing and sampling. 


GSMR_H[CDP] and GSMR_H[CTSP] determine whether CD or CTS need to be asserted 
only once to begin reception/transmission or whether they must remain asserted for the 
duration of the transparent frame. Pulse operation allows an uninterrupted stream of data. 
However, use envelope mode to identify frames of transparent data. 


The sampling option determines the delay between CD and CTS being asserted and the 
resulting action by the SCC. Assume either that these signals are asynchronous to the data 
and internally synchronized by the SCC or that they are synchronous to the data with faster 
operation. This option allows RTS of one SCC to be connected to CD of another SCC and 
to have the data synchronized and bit aligned. It is also an option to link the transmitter 
synchronization to the receiver synchronization. Diagrams for the pulse/envelope and 
sampling options are shown in Section 21.4.4, “Controlling SCC Timing with RTS, CTS, 
and CD.” 


28.4.1.2.1 External Synchronization Example 
Figure 28-1 shows synchronization using external signals. 
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MPC850 (A) MPC850 (B) 























BRGOx 
(Output is CLKx Input) 


TXD 
(Output is RXD Input) 






=a : 
| : | 
RTS wa. First Bit of Frame Data ei bik rae ee 

(Output is CD Input) | | 


TxBD[L] = 1 Causes Negation of RTS ad 


D Lost Condition Terminates Reception of Frame 


Notes: 
1. Each MPC850 generates its own transmit clocks. If the transmit and receive clocks are the same, one MPC850 can generate transmit and 
receive clocks for the other MPC850. For example, CLKx on MPC850(B) could be used to clock the transmitter and receiver. 
2. CTS should be configured as always asserted in the Port C parallel I/O or connected to ground externally. 
3. The required GSMR configurations are DIAG= 00, CTSS=1, CTSP is a “don't care’, CDS=1, CDP=0, TTX=1, and TRX=1. REVD and TCRC 
are application-dependent. 
4. The transparent frame contains a CRC if TxBD[TC] is set. 


Figure 28-1. Sending Transparent Frames between MPC850 


MPC850(A) and MPC850(B) exchange transparent frames and synchronize each other 
using RTS and CD. However, CTS is not required because transmission begins at any time.’ 
Thus, RTS is connected directly to the other MPC850 CD pin. GSMR_H[RSYN] is not 
used and transmission and reception from each MPC850 are independent. 


28.4.1.3 Transparent Mode without Explicit Synchronization 


If there is no need to synchronize the transparent controller at a specific point, the user can 
‘fake’ synchronization in one of the following ways: 


¢ Tie a parallel I/O pin to the CTS and CD lines. Then, after enabling the receiver and 
transmitter, provide a falling edge by manipulating the I/O pin in software. 


e Enable the receiver and transmitter for the SCC in loopback mode and then change 
GSMR_L[DIAG] to 0b00 while the transmitter and receiver and enabled. 


28.4.1.4 End of Frame Detection 

An end of frame cannot be detected in the transparent data stream since there is no defined 
closing flag in transparent mode. Therefore, if framing is needed, the user must use the CD 
line to alert the transparent controller of an end of frame. 
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28.4.2 Synchronization and the TSA 
A transparent-mode SCC using the time-slot assigner can synchronize either on a 


user-defined in-line pattern or by inherent synchronization. 


Note that when using the TSA, a newly-enabled transmitter sends from 10 to 15 frames of 
idles before sending the actual transparent data due to start-up requirements of the TDM. 
Therefore, when loopback testing through the TDM, expect to receive several bytes of OXFF 
before the actual data. 


28.4.2.1 In-line Synchronization Pattern 
The receiver can be programmed to begin receiving data into the receive buffers only after 


a specified data pattern arrives. To synchronize on an in-line pattern: 
e Set GSMR_H[SYNL]. 
e Program the DSR with the desired pattern. 
e Clear GSMR_H[CDP]. | 
e Set GSMR_H[CTSP, CTSS, CDS]. 


If GSMR_H[TXSY] is also used, the transmitter begins transmission eight clocks after the 
receiver achieves synchronization. 


28.4.2.2 Inherent Synchronization 


Inherent synchronization assumes synchronization by default when the channel is enabled; 
all data sent from the TDM to the SCC is received. To implement inherent synchronization: 


¢ Set GSMR_H[CDP, CDS, CTSP, CTSS]. 


If these bits are not set, the received bit stream will be bit-shifted. The SCC loses the first 
received bit because CD and CTS are treated as asynchronous signals. 





28.5 CRC Calculation in Transparent Mode 


The CRC calculations follow the ITU/IEEE standard. The CRC is calculated on the 
transmitted data stream; that is, from Isb to msb for non-bit-reversed (GSMR_H[REVD] = 
Q) and from msb to Isb for bit-reversed (GSMR_H[REVD] = 1) transmission. The 
appended CRC is sent msb to Isb.When receiving, the CRC is calculated as the incoming 
bits arrive. The optional reversal of data (GSMR_H[REVD] = 1) is done just before data is 
stored in memory (after the CRC calculation). 


28.6 SCC Transparent Parameter RAM 


For transparent mode, the protocol-specific area of the SCC parameter RAM is mapped as 
in Table 28-2. | | 
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Table 28-2. SCC Transparent Parameter RAM Memory Map 


Ed 


Ox 30 |CRC_P|Long | CRC preset for totally transparent. For the 16-bit CRC-CCITT, initialize with OxO000_FFFF. 
For the 32-bit CRC-CCITT, initialize with OxFFFF_FFFF and for the CRC-16, initialize with 
ones (Ox0000_FFFF) or zeros (Ox0000_0000). 





Ox 34 {|CRC_CjLong |CRC constant for totally transparent receiver. For the 16-bit CRC-CCITT, initialize with 
0x0000_FOBS8. For the 32-bit CRC-CCITT, CRC_C initialize with OxDEBB_20E3 and for 
the CRC-16, which is normally used with BISYNC, initialize with OxO000_0000. 


' From SCC base address 


CRC_P and CRC_C overlap with the CRC parameters for the HDLC-based protocols. 
However, this overlap is not detrimental since the CRC constant is used only for the receiver 
and the CRC preset is used only for the transmitter, so only one entry is required for each. 
Thus, the user can choose an HDLC transmitter with a transparent receiver or a transparent 
transmitter with an HDLC receiver. 


28.7 SCC Transparent Commands 


The following transmit and receive commands are issued to the CP command register. 
Table 28-3 describes transmit commands. 


Table 28-3. Transmit Commands 


Description 


STOP After hardware or software is reset and the channel is enabled in the GSMR, the channel is in transmit 
TRANSMIT enable mode and starts polling the first BD every 64 clocks (or immediately if TODR[TOD] = 1). STOP 
TRANSMIT disables frame transmission on the transmit channel. If the transparent controller receives the 
command during frame transmission, transmission is aborted after a maximum of 64 additional bits 
and the transmit FIFO is flushed. The current TxBD pointer (TBPTR) is not advanced, no new BD is 
accessed and no new buffers are sent for this channel. The transmitter will send idles. 












Stops transmission smoothly, rather than abruptly, in much the same way that the regular STOP 
TRANSMIT Command stops. It stops transmission after the current frame finishes or immediately if no 
frame is being sent. A transparent frame is not complete until a BD with TxBD|L] set has its buffer 
completely sent. SCCE[GRA] is set once transmission stops; transmit parameters and their BDs can 
then be modified. The current TxBD pointer (TBPTR) advances to the next TxBD in the table. 
Transmission resumes once TxBD[R] is set and a RESTART TRANSMIT Command is issued. 


GRACEFUL 
STOP 
TRANSMIT 

















Reenables transmission of characters on the transmit channel. The transparent controller expects it 
after a STOP TRANSMIT Command is issued (at which point the channel is disabled in SCCM), after a 
GRACEFUL STOP TRANSMIT command is issued, or after a transmitter error. The transparent controller 
resumes transmission from the current TBPTR in the channel TxBD table. 


INIT TX Initializes all transmit parameters in the serial channel parameter RAM to reset state. Issue only when 
P 


RESTART 
TRANSMIT 





ARAMETERS | the transmitter is disabled. INIT TX AND RX PARAMETERS resets receive and transmit parameters. 
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Table 28-4 describes receive commands. 


Table 28-4. Receive Commands 


ENTER HUNT | After hardware or software is reset and the channel is enabled, the channel is in receive enable mode 

MODE and uses the first BD in the table. ENTER HUNT MODE forces the transparent receiver to the current 
frame and enter hunt mode where the transparent controller waits for the synchronization sequence. 
After receiving the command, the current buffer is closed. Further data reception uses the next BD. 


CLOSE RXBD_ | Forces the SCC to close the RxBD if it is being used and to use the next BD for any subsequently 
received data. If the SCC is not receiving data, no action is taken by this command. 


INIT RX Initializes all receive parameters in this serial channel parameter RAM to reset state. Issue only when 
PARAMETERS | the receiver is disabled. INIT TX AND RX PARAMETERS resets receive and transmit parameters. 





28.8 Handling Errors in the Transparent Controller 


The SCC reports message reception and transmission errors using the channel buffer 
descriptors, the error counters, and SCCE. Table 28-5 describes transmit errors. 


Table 28-5. Transmit Errors 


es 


Transmitter When this occurs, the channel stops sending the buffer, closes it, sets TxBD[UN], and generates a 

Underrun TXE interrupt if it is enabled. Transmission resumes after a RESTART TRANSMIT Command is 
received. Underrun occurs after a transmit frame for which TxBD[L] was not set. In this case, only 
SCCE[TXE] is set. Underrun cannot occur between transparent frames. 


CTS Lost During | When this occurs, the channel stops sending the buffer, closes it, sets TxBD[CT], and generates 
Message ~ |the TXE interrupt if it is enabled. The channel resumes sending after RESTART TRANSMIT is received. 
Transmission 





Table 28-6 describes receive errors. 


Table 28-6. Receive Errors 


7 eee. eee 


Overrun The SCC maintains a receive FIFO. The CPM starts programming the SDMA channel if the buffer is 
in external memory and updating the CRC when 8 or 32 bits are received in the FIFO as determined 
by GSMR_H[RFW). If a FIFO overrun occurs, the SCC writes the received byte over the previously 
received byte. The previous character and its status bits are lost. Afterwards, the channel closes the 
buffer, sets OV in the BD, and generates the RXB interrupt if it is enabled. The receiver immediately 
enters hunt mode. 


CD Lost During | When this occurs, the channel stops receiving messages, closes the buffer, sets RxBD[CD], and 

Message — generates the RXB interrupt if it is enabled. This error has highest priority. The rest of the message 

Reception is lost, and no other errors are checked in the message. The receiver immediately enters hunt 
mode. 





28.9 Transparent Mode and the PSMR 


The protocol-specific mode register (PSMR) is not used by the transparent controller 
because all transparent mode selections are made in the GSMR. If only half of an SCC 
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(transmitter or receiver) is running the transparent protocol, the other half (receiver or 
transmitter) can support another protocol. In such a case, use the PSMR for the 
non-transparent protocol. 


28.10 SCC Transparent Receive Buffer Descriptor 
(RxBD) 


The CPM reports information about the received data for each buffer using an RxBD, 
closes the current buffer, generates a maskable interrupt, and starts receiving data into the 
next buffer after one of the following occurs: 


e Anerror is detected. 


e A full receive buffer is detected. 
e An ENTER HUNT MODE command is Issued. 
e A CLOSE RXBD command is issued. 


Rx Buffer Pointer 





Figure 28-2. SCC Transparent Receive Buffer Descriptor (RxBD) 


Table 28-7 describes RxBD status and control fields. 
Table 28-7. SCC Transparent RxBD Status and Control Field Descriptions | 


jeits Name] eseriofon 


0 The buffer is full or stopped receiving data because an error occurred. The core can read or write to 
any fields of this RxBD. The CPM does not use this BD when RxBD[E] is zero. 

1 The buffer is not full. This RxBD and buffer are owned by the CPM. Once E is set, the core should 
not write any fields of this RxBD. 


Wrap (final BD in table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM receives data into the first BD that RBASE 
points to. The number of BDs in this table is determined only by RxBD[W] and overall space 
constraints of the dual-port RAM. 


3 Interrupt. 
0 No interrupt is generated after this buffer is used. 
1 When this buffer is closed by the transparent controller, the SCCE[RXB] is set. SCCE[RXB] can 
cause an interrupt if it is enabled. 
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Table 28-7. SCC Transparent RxBD Status and Control eee Descriptions 
(Continued) 


Es 


Last in frame. Set by the transparent controller when this buffer is the last in a frame, which occurs . 
when CD is negated (if GSMR_H[CDP] = 0) or an error is received. If an error is received, one or more 
of RxBD[OV, CD, DE] are set. The transparent controller writes the number of frame octets to the BD’s 
data length field. 

0 Not the last buffer in a frame. 

1 Last buffer in a frame. 


First in frame. The transparent controller sets F when this buffer is the first in the frame: 
0 Not the first buffer in a frame. 
1 First buffer in a frame. 


Continuous mode. 

0 Normal operation. 

1 The CPM does not clear RxBD[E] after this BD is closed, letting the buffer be overwritten when the 
CPM next accesses this BD. However, RxBD[E] is cleared if an error occurs during reception, 
regardless of how CM is set. 


DPLL error. Set by the transparent controller when a DPLL error occurs as this buffer is received. In 
decoding modes, where a transition is promised every bit, DE is set when a missing transition occurs. 
lf a DPLL error occurs, no other error checking is performed. 


10 }— Reserved, should be cleared. 
14 ; = nner cate 


CRC error indication bits. Indicates that this frame contains a CRC error. The received CRC bytes are | 
always written to the receive buffer. CRC checking cannot be disabled, but it can be ignored. 


Overrun. Indicates that a receiver overrun occurred during buffer reception. 
Carrier detect lost. Indicates when CD is negated during buffer reception. 


Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).’” Although it is never modified by the CP, data length should be greater 
than zero. The CPM writes these fields after it finishes sending the buffer. The Rx buffer 
pointer must be divisible by four, unless GSMR_H[RFW] is set to 8 bits wide, in which 
case the pointer can be even or odd. The buffer can reside in internal or external memory. 





28.11 SCC Transparent Transmit Buffer Descriptor 
(TxBD) 


Data is sent to the CPM for transmission on an SCC channel by arranging it in buffers 
referenced by the TxBD table. The CPM uses BDs to confirm transmission or indicate error 
conditions so the processor knows buffers have been serviced. Prepare status and control 
bits before transmission; they are set by the CPM after the buffer is sent. 
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pee frefew = 


| Data Length 


Tx Buffer Pointer 





7 Figure 28-3. SCC Transparent Transmit Buffer Descriptor (TxBD) 


Table 28-8 describes SCC Transparent TxBD status and control fields. 
Table 28-8. SCC Transparent Tx BD Status and Control Field Descriptions 






Ready. 

0 The buffer is not ready for transmission. The BD and buffer can be updated. The CPM clears R after 
the buffer is sent or after an error is encountered. 

1 The user-prepared buffer is not sent yet or is being sent. This BD cannot be updated while R = 1. 








Wrap (final BD in table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CPM receives incoming data into the first BD that 
TBASE points to. The number of TxBDs in this table is determined only by TxBD[W] and overall 

space constraints of the dual-port RAM. 












Interrupt. Note that clearing this bit does not disable SCCE[TXE]. 
0 No interrupt is generated after this buffer is serviced. 

1 When the CPM services this buffer, SCCE[TXB] or SCCE[TXE] is set. These bits can cause 
interrupts if they are enabled. 









Last in message. 

O The last byte in the buffer is not the last byte in the transmitted transparent frame. Data from the 
next transmit buffer is sent immediately after the last byte of this buffer. 

1 The last byte in the buffer is the last byte in the transmitted transparent frame. After this buffer is 

sent, the transmitter requires synchronization before the next buffer is sent. 












Transmit CRC. 
0 No CRC sequence is sent after this buffer. 
1 A frame check sequence defined by GSGMR_H[TCRC] is sent after the last byte of this buffer. 








Continuous mode. 
0 Normal operation. 

1 The CPM does not clear TxBD[R] after this BD is closed, so the buffer is automatically resent when 
the CPM accesses this BD next. However, TxBD[R] is cleared if an error occurs during 
transmission, regardless of how CM is set. 


7-13 p= Reserved, should be cleared. 
Underrun. Set when the SCC encounters a transmitter underrun condition while sending the buffer. 
| CTS lost. Indicates the CTS was lost during frame transmission. 


Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors (BDs).’” The buffer pointer can be even or odd and can reside in internal or 
external memory. 
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28.12 SCC Transparent Event Register (SCCE)/Mask 
Register (SCCM) 


When the SCC is in transparent mode, the SCC event register (SCCE) functions as the 
transparent event register to report events recognized by the transparent channel and to 
generate interrupts. When an event is recognized, the transparent controller sets the 
corresponding SCCE bit. Interrupts are enabled by setting, and masked by clearing, the 
equivalent bits in the transparent mask register (SCCM). 


Event bits are reset by writing ones; writing zeros has no effect. All unmasked bits must be 
reset before the CPM negates the internal interrupt request signal. Figure 28-4 shows the 
event and mask registers. 


P= fanfeurfocc] - [oral — |e] — [esr] ne [xe 


0000_0000_0000_0000 


\ 0xA30 (SCCE2)/0xA34 (SCCM2); 0xA50 (SCCE3)/0xA54 (SCCM3) 
Figure 28-4. SCC Transparent Event Register (SCCE)/Mask Register (SCCM) 








Table 28-9 describes SCCE/SCCM fields. 


Table 28-9. SCCE/SCCM Field —— 
Ca 
ae 


. GLT Glitch on Tx. Set when the SCC finds a glitch on the transmit clock. 


DCC |DPLL CS changed. Set when the DPLL-generated carrier sense status changes (valid only when the 









& 















DPLL is used). Real-time status can be read in SCCS. This is not the CD status mentioned elsewhere. 
i bell Reserved, should be cleared. 
Graceful stop complete. Set when a graceful stop initiated by completes as soon as the transmitter 
finishes any frame in progress when the GRACEFUL STOP TRANSMIT command was issued. Immediately 
if no frame was in progress when the command was issued. | 
va Reserved, should be cleared. 
Tx error. Set when an error occurs on the transmitter channel. 
ae Reserved, should be cleared. 
13 BSY Busy condition. Set when a byte or word is received and discarded due to a lack of buffers. The 
receiver resumes reception after it gets an ENTER HUNT MODE command. 
14 |TXB Tx buffer. Set no sooner than when the last bit of the last byte of the buffer begins transmission, 
assuming L is set in the TxBD. If it is not, TXB is set when the last byte is written to the transmit FIFO. 


RXB_ | Rx buffer. Set when a complete buffer was received on the SCC channel, no sooner than two serial | 
clocks after the last bit of the last byte in which the buffer is received on RXD. 
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28.13 SCC Status Register in Transparent Mode 
(SCCS) 


The SCC status register (SCCS) allows monitoring of real-time status conditions on the 
RXD line. The real-time status of CTS and CD are part of the port C parallel I/O. 





i ae 


0000_0000 


0xA37 (SCCS2), 0xA57 (SCCS3) 
Figure 28-5. SCC Status Register in Transparent Mode (SCCS) 


Table 28-10 describes SCCS fields. 
Table 28-10. SCCS Field Descriptions 


Reserved, should be cleared. 


Carrier sense (DPLL). Shows the real-time carrier sense of the line as determined by the DPLL. 
0 The DPLL does not sense a carrier. 
1 The DPLL senses a carrier. 


Ea 
28.14 SCC2 Transparent Programming Example 


The following initialization sequence enables the transmitter and receiver, which operate 
independently of each other. They implement the connection shown on MPC850(B) in 
Figure 28-1. CLK3 externally provides transmit and receive clocks to MPC850(B). The 
transparent controller is configured with RTS2 and CD2 active and CTS2 is configured to 
be grounded internally in port C. A 16-bit CRC-CCITT is sent with each transparent frame. 
The FIFOs are configured for fast operation. 




















The transmit and receive clocks are externally provided to MPC850(B) using CLK3. SCC2 
is used. The transparent controller is configured with the RTS2 and CD2 pins active and 
CTS2 is configured to be grounded internally in port C. A 16-bit CRC-CCITT is sent with 
each transparent frame. The FIFOs are configured for fast operation. 








1. Configure the port A pins to enable TXD2 and RXD2. Set PAPAR[12, 13] and clear 
PADIR[12, 13] and PAODR[12, 13]. 


2. Configure the port C pins to enable RTS2, CTS2, and CD2. Set PCPAR[14] and 
PCSO[8, 9] and clear PCPAR[8, 9] and PCDIR[8, 9, 14]. 


3. Configure port A to enable CLK3. Set PAPAR[5] and clear PADIR[5]. 
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4. Connect CLK3 to SCC2 using the serial interface. Set SICR[R2CS] and 
SICR[T2CS] to 0b110. 


5. Connect the SCC2 to the NMSI and clear SICR[SC2]. 
. Initialize the SDMA configuration register (SDCR) to 0x0001. 


7. Write RBASE with 0x0000 and TBASE with 0x0008 in the SCC2 parameter RAM 
to point to one RxBD at the beginning of dual-port RAM followed by one TxBD. 


8. Write 0x0041 to the CPCR to execute INIT RX AND TX PARAMETERS for SCC2. 
9. Write RFCR and TFCR with 0x10 for normal operation. 


10. Write MRBLR with the maximum number of bytes per receive buffer and assume 
16-bytes, so MRBLR = 0x0010. 


11.Write CRC_P with 0xO000_FFFF to comply with the 16-bit CRC-CCITT. 
12.Write CRC_C with 0x0000_FOB8 to comply with the 16-bit CRC-CCITT. 


13. Initialize the RxBD. Assume the Rx buffer is at OxOOO0_1000 in main memory. 
Write 0xB000 to RxBD[Status and Control], Ox0000 to RxBD[Data Length] 
(optional), and 0x0000_1000 to RxBD/[Buffer Pointer]. 


14. Initialize the TxBD. Assume the Tx buffer is at 0x0000_2000 in main memory and 
contains five 8-bit characters. Write OxBCOO to TxBD[Status and Control], 0x0005 
to TxBD[Data Length], and OxO000_2000 to TxBD|Buffer Pointer]. 


15. Write OXFFFF to SCCE to clear any previous events. 
16. Write 0x0013 to SCCM to enable the TXE, TXB, and RXB interrupts. 


17. Write 0x2000_0000 to CIMR so the SCC2 can generate a system interrupt. The 
CICR should also be initialized. 


18. Write 0x0000_1980 to GSMR_H2 to configure the transparent channel. 
19. Write 0x0000_0000 to GSMR_L2 to configure CTS and CD to automatically 


ON 


control transmission and reception (DIAG bits). Normal operation of the transmit 
3 clock is used. Note that the transmitter (ENT) and receiver (ENR) are not enabled 
yet. 


20. Write 0x0000_0030 to GSMR_L2 to enable the SCC2 transmitter and receiver. This 
additional write ensures that the ENT and ENR bits are enabled last. 


Note that after 5 bytes are sent, the Tx buffer is closed and after 16 bytes are received the 
Rx buffer is closed. Any data received after 16 bytes causes a busy (out-of-buffers) 
condition since only one RxBD is prepared. 
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Chapter 29 
IrDA Mode—SCC2 Only 


IrDA is a family of specifications for interconnecting computers and peripherals using a 
directed half-duplex serial infrared communications medium. The infrared data association 
(irDA) physical layer standard version 1.1 specifies three modes of operation, each with a 
distinct modulation scheme and signaling rate. 


e Low speed—2.4 Kbps to 115.2 Kbps 
e Middle speed—0.576 Mbps or 1.152 Mbps 
e High speed—4 Mbps 


Figure 29-1 shows how to implement a serial infrared link using the SCC2’s IrDA 
encoder/decoder module and an external IrDA transducer module. 







iR Transducer 
Module 


Output Driver & 
LED 
Detector & 


: Receiver 


Figure 29-1. Serial Infrared (SIR) Link 





MPC850 Encoder/Decoder 


Module 


















IR Transmit 


Encoder IR Out 









IR In 





IR Receive 
a Decoder F 


The IrDA DPLL is driven by a baud rate generator output or by an external clock called a 
high-speed receive/transmit clock (HSRCLK/HSTCLK) that is used as a reference clock 
for the IrDA DPLL. In low- and middle-speed modes, the HSRCLK and HSTCLK 
frequency should be 16x the serial frequency. In high-speed mode, the ratio between the 
HSRCLK/HSTCLK frequency and the serial frequency is determined by the IrDA DPLL 
mode, as described in See Section 29.4.1, “Infrared Mode Register TRMODE).” 
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29.1 Low-Speed IrDA Protocol 


The low-speed IrDA protocol consists of a data link layer and a physical layer. 


e The data link layer is based on a preexisting asynchronous HDLC protocol standard. 
OxCO is used as a start flag; OxC1 is used as an ending flag. Each character is 
compromised out of a start bit, 8 data bits, no parity bit and ending with a stop bit, 
as shown in Figure 29-2(a). - 


e The physical layer defines electrical parameters of the signals between the 
encoder/decoder module and the IR transducer module. The waveform is shown in 
Figure 29-2. For signaling rates up to and including 115.2 Kbps, the minimum pulse 
duration is the same: */,, of the bit duration for the 115.2 Kbps signal (minus 
protocol-defined tolerance). The maximum pulse duration is °/,, of the bit duration 
(plus protocol-defined tolerance). | 














<— UART Frame — > 
«Start Stop | 
=< Bit ><— Data Bits > ~<- Bit > 














= Lge 3/16 Bit Time 


Figure 29-2. Low-Speed IrDA Data Format 


29.2 Middle-Speed IrDA Protocol 


The middle-speed IrDA protocol consists of a data link layer and a physical layer. 


e The data link layer is derived from the preexisting synchronous HDLC protocol 
standard. The frame format follows the standard HDLC format except that it 
requires two start flags. The frame consists of two start flags, an address field, a 
control field, an information field, a frame check sequence field, and a minimum of 
one ending flag. Ox7E is used for the start flag as well for the ending flag. 





Figure 29-3. Middle Speed Packet Format 
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e The physical layer defines electrical parameters of signals between the IR transducer 
module and the encoder/decoder module. The waveform is shown in Figure 29-4(b). 
For 0.576 and 1.152 Mbps, the minimum and maximum pulse duration are the 
nominal '/, of the bit duration (plus or minus the protocol defined tolerance). 


DATA BITS 





Figure 29-4. Middle-Speed IrDA Data Format 


29.3 High-Speed IrDA Protocol 


The high-speed IrDA protocol is derived from the transparent SCC protocol standard. 


29.3.1 4PPM Data Encoding Definition 


Pulse position modulation (PPM) encoding is achieved by defining a data symbol duration 
(Dt) and subsequently subdividing it into a set of equal time slices, or chips. In PPM 
schemes, each chip position within a data symbol represents one of the possible bit 
combinations. Each chip has a duration of Ct given by the following: 


Ct = Dt/Base 


In this formula, base refers to the number of pulse positions or chips in each data symbol. 
The base for high-speed IrDA protocol is defined as four and the resulting modulation 
scheme is four pulse-position modulation (4PPM). The data rates of a IIDA PPM system 
are defined as 4.0 Mbps. The resulting values for Ct and Dt are as follows: 


Dt = 500 ns 
Ct= 125 ns 
Figure 29-5 shows a data symbol field and its enclosed chip durations for a 4PPM scheme. 


Chip 4 Chip 3 Chip 4 


Figure 29-5. One Complete Symbol 


Because there are four unique chip positions within each symbol in 4PPM, four. 
independent symbols exist in which only one chip is logically a one while other chips are 
logically a zero. These four unique symbols are the only legal data symbols (DD) allowed 
in 4PPM. Each DD represents two bits of payload data, or a single data bit pair (DBP), so 
that a byte of payload data can be represented by four DDs in sequence. Table 29-1 defines 
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the chip pattern representation of the four unique DDs defined for 4PPM. 
Table 29-1. 4PPM Encoding — 


- Data Bit Pair 4PPM Data Symbol . 
| 1000 





Logical 1 represents a chip duration when the transmitting LED is emitting light, while 
logical 0 represents a chip duration when the LED 1s off. Data encoding for transmission 1s 
done Isb first. The 4PPM data encoding defines only the legal encoded payload data 
symbols. All other four-chip combinations are by definition illegal symbols for encoded 
payload data. Some illegal symbols are used to define the packet envelope (preamble, start 
flag, stop flag) because they are unambiguously not data. 


29.3.2 Data Link Layer 


The data link layer protocol defines the following packet format. 


PA Link Layer Frame STO 


Figure 29-6. High-Speed Packet Format 


The receiver uses the preamble field (PA) to establish bit synchronization. The preamble 
field consists of exactly sixteen repeated transmissions of the following stream of symbols. 


1000 0000 1010 1000 


Figure 29-7. Preamble Field Symbol Format 


On the receive side, PA does not need to be valid in the received packet. After the PA, the 
receiver starts searching for the start flag (STA) to establish symbol synchronization. After 
STA is received, the receiver can begin interpreting the data symbols in the link layer frame. 
The STA consists of exactly one transmission of the following stream of symbols. 


—— 0000 1100 0000 1100 0110 0000 0110 0000 


Figure 29-8. Start Flag Symbol Format 


The link layer frame generally consists of the following fields — address, control, data and 
CRC32. The IrDA transmitter decodes the packet bits into 4PPM format. The 4PPM 
encoding will be described later. The receiver is responsible to decode the incoming data 
frame into the regular bit format and to deliver it to the software. The receiver continues to 
receive and interpret data until the stop flag (STO) is recognized. STO indicates the end of 
frame and consists of exactly one transmission of the following stream of symbols. 
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0000 1100 | 0000 1100 0000 1100 0000 1100 | 


Figure 29-9. Stop Flag Symbol Format 





The physical layer defines the electrical parameters of the signals between the 
encoder/decoder module and the IR transducer module. All frame envelope patterns— PA, 
STA, and STO —are sent as is. Link layer frame bits are decoded before transmission. Each 
two bits decoded into four chips according to the 4PPM scheme. 


DATA BITS 





Figure 29-10. High-Speed IrDA Data Format 


29.3.3 Serial Infrared Interaction Pulses 


To guarantee nondisruptive coexistence with slower (a maximum of 115.2 Kbps) systems, 
once a high-speed (above 115.2 Kbps) connection has been established the high-speed 
system must emit a serial infrared interaction pulse (SIP) at least once every 500 ms. This 
continues for the duration of the connection to quiet slower systems that might interfere 
with the link. The pulse is shown in Figure 29-11. 


8.7 US 


1.6 US 





Figure 29-11. Serial Infrared Interaction Pulse Waveform 


The SIP signal can be stimulated in two ways: 


e By software when IRSIP[GS] is set 
e By the Timer2 expiration when IRSIP[TS] is set . 


A suitable SIP waveform is generated by writing proper values to IRSIP[SLL, SHL]. 
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29.4 IrDA Registers 


~The IrDA facility provides two SCC2 internal memory-mapped registers, IRMODE and 


IRSIP, described in the following sections. 


29.4.1 Infrared Mode Register (IRMODE) 


The infrared mode register (IRMODE), shown in Figure 29-12, controls the infrared 
operation mode (low, middle or high speed), the number of preambles, the loop mode, the 
full-duplex operation, and the DPLL clock rate. 













P| - frre] ne] oem [ro ftoor] - | moo [en 


Figure 29-12. Infrared Mode Register (IRMODE) 


Table 29-2 describes IRMODE fields. 
Table 29-2. IRMODE Field Descriptions 


a 


Number of preambles. Determines the number of preambles in a high-speed transmitter. (high-speed 
mode only). 

0000 16 preambles. 

0001 1 preamble. 



















1111 15 preambles. 


a 


RXP Rx polarity. Determines the polarity of the received signal. 
0 Active high polarity. An active high pulse is decoded as ‘0’. 
1 Active low polarity. An active low pulse is decoded as ‘0’. 



















TXP 


; 


Tx polarity. Determines the polarity of the transmitted signal. 
0 Active high polarity. An active high pulse is decoded as ‘0’. 
1 Active low polarity. An active low pulse is decoded as ‘0’. 





IrDA DPLL clock ratio. Determines the clock ratio between the IrDA DPLL clock and the bit rate clock. 
Valid only in high-speed mode. 

00 12x bit rate clock. 

01 Reserved. 

1x Reserved. 

01 16x bit rate clock. 

10 20x bit rate clock. 

11 Reserved. 











Full duplex. This bit should be set in loopback mode. 
0 Data reception is disabled during a transmission process. 
1 Transmission and reception of data in parallel are enabled. 
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Table 29-2. IRMODE Field Descriptions (Continued) 


el 


11 LOOP | Loop mode. Enables local loopback operation. 
0 Normal operation. 
1 The IrDA is in loopback mode. The transmitter output is internally connected to the receiver input. 


The receiver and transmitter operate normally except that the received data is ignored. 


13-14 IR mode. 
00 Low-speed mode (up to and including 115.2 Kbps). 
01 Middle speed (0.576 Mbps or 1.152 Mbps). 
10 High speed (4.0 Mbps). 
11 Reserved. 


Enable IrDA. Enables IrDA decoder/encoder operation. EN can be changed only when SCC is off. 
0 IrDA is disabled. 
1 IrDA is enabled. 





29.4.2 Infrared Serial Interaction Control Register (IRSIP) 


The infrared serial interaction control register (IRSIP), shown in Figure 29- 13, controls the 
initiation of the serial infrared interaction pulse and its waveform. 








| 0000_0000_0000_0000 
: (IMMR & OxFFFO000) + OxA3A 


Figure 29-13. Infrared Serial Interaction Control Register (IRSIP) 







Table 29-3 describes IRSIP fields. 
Table 29-3. IRSIP Field Descriptions 


epee 
ofr 


Generate SIP signal. Reading this bit always returns Zero. 


0 Writing zero to this bit has no affect. 
2 TS 
1 The expiration of Timer2 triggers the generation of the SIP signal. 




















Timer set. 
0 The Timer2 status has no effect on the SIP signal. 







1 Setting this bit stimulate generation of SIP signal. SIP signal generation eventually occurs only when 
the channel is idle. This bit is immediately reset by the IrDA controller. 
SIP high-level length. Determines the width of the SIP assertion part, in bit rate clock units. 
SIP Low-Level Length. Determines the width of the SIP negation part, in bit rate clock units. 
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29.5 Low-Speed IrDA Programming 


The low-speed infrared programming is very similar to the SCC asynchronous HDLC 
programming. The only difference are the values of EOF and BOF in the parameter RAM 
and the IRMODE register’s programming. Use the following initialization sequence when 
using low-speed infrared. 

1. Initialize the SDCR register. 


2. Configure the port A and port C pins to enable RXD2, TXD2, CTS, CD, and CTS. 
This assumes NMSI mode is used. If not, appropriately configure the TSA and pins. 


3. Configure a baud-rate generator for the appropriate channel clocking frequency. 


4. Program the SICR to route the baud rate generator clocking to SCC2 running 
asynchronous HDLC. 


5. Select whether the channel is using the TSA or the NMSI pins in the SICR. 


6. Write RBASE and TBASE in the SCC2 parameter RAM to point to the first Rx BD 
and the first TxBD. 


7. Issue the INIT RX & TX PARAMETERS command for SCC2. 
8. Program RFCR and TFCR. 

9. Write MRBLR with the maximum receive buffer size. 

10. Write C_MASK and C_PRES with the standard values. 
11.Write 0xCO to BOF, 0xC1 to EOF, and 0x7D to ESC. 

12. Write 0x0000 to the zero register in the parameter RAM. 


13.Program the RFTHR to the number of frames that should be received before an 
interrupt is generated. 


14. Program the TX and RX control character tables. 
15. Initialize all RxBDs. 
16. Initialize all TxBDs. | 
17.Clear the SCCE register by writing OxFFFF to it. 
18.Program the SCCM register with the proper mask to allow all desired interrupts. 
19.Program the GSMR_H. | 


20.Program the GSMR_L register to asynchronous HDLC mode, but do not turn on the 
transmitter or receiver. 


21. Write 0x0001 to the IRMODE register to enable the IR. 
22.Set the PSMR register appropriately. 
23.Turn on the transmitter and receiver by setting GSMR_L[ENT, ENR]. 
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29.6 Middle-Speed IrDA Programming 


Middle-speed infra-red programming is very similar to SCC synchronous HDLC 
programming. The parameter RAM programming and the RxBDs and TXBDs are the same 
as in the SCC synchronous HDLC. All SCC2 synchronous registers and the infrared 
registers must be initialized. The following is an initialization sequence for a middle-speed 
infrared channel assuming that an external clock is provided. CLK3 is used for the infra-red 
receiver and transmitter. 


1. Configure the port A pins to enable TXD2 and RXD2. Set PAPAR[12,13] and clear 
PADIR[12,13] and PAODR[12,13]. 
2. Configure port A to enable CLK3. Set PAPAR[5] and clear PADIR[S5]. 


3. Connect CLK3 to SCC2 using the serial interface. Write SICR[R2CS ,T2CS] to 
0b110. 


4. Connect the SCC2 to the NMSI (its own set of pins). Clear SICR[SC2]. 
5. Write the SDCR with the appropriate arbitration ID. 


6. Write RBASE and TBASE in the SCC2 parameter RAM to point to the RxBD and 
TxBD in dual-port RAM. Assuming one RxBD at the beginning of dual-port RAM 
followed by one TxBD, set RBASE = 0x2000 and TBASE = 0x2008. 


7. Program the CPCR to execute the INIT RX AND TX PARAMS command for SCC2. 
8. Write RFCR with 0x18 and TFCR with 0x18 for normal operation. 


9. Write MRBLR with the maximum number of bytes per receive buffer. For this case, 
assume 256 bytes, so MRBLR = 0x0100. The value 256 allows an entire receive 
frame to fit into one receive buffer. 


10. Write C_MASK with OxOOOOFOB8 to comply with 16-bit CCITT-CRC. 

11. Write C_PRES with OxOOOOFFFF to comply with 16-bit CCITT-CRC. 
12.Clear DISFC, CRCEC, ABTSC, NMARC, and RETRC for the sake of clarity. 
13. Write MFLR with 0x0100 to make the maximum frame size 256 bytes. 

14. Write RFTHR with 0x0001 to allow interrupts after each frame. 

15. Write HMASK with 0x0000 to allow all addresses to be recognized. 

16.Clear HADDR1, HADDR2, HADDR3, and HADDR4 for clarity. 


17. Initialize the RxBD. Assume the Rx buffer is at 0x00001000 in main memory. Write 
0xBO000 to the RxBD status and control bits. Write OxO000 to RxBD[Length] (not 
required, for instructional purposes only). Write 0x00001000 to RxBD[Pointer]. 


18. Initialize the TxBD. Assume the Tx data frame is at 0x00002000 in main memory 
and contains five 8-bit characters. Write OxBCO0 to the TxBD status and control bits. 
Write 0x0005 to TxBD[Length]. Write 0x00002000 to TxBD [Pointer]. 


19. Write OxFFFF to the SCCE-HDLC to clear any previous events. 
20. Write 0x001A to the SCCM-—HDLC to enable the TXE, RXF, and TXB interrupts. 
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— 21.Write 0x20000000 to the CIMR to allow the SCC2 to generate a system interrupt. 
The CICR should also be initialized. 


22.Write 0x00000000 to GSMR_H[MODE] to enable normal behavior of CTS and CD 
and idles between frames (as opposed to flags). 


23. Write 0x00028800 to GSMR_L to configure CTS and CD to automatically control 
transmission, reception (DIAG field), and HDLC mode. Normal operation of the 
transmit clock is selected and the TCI bit is cleared. The TDCR and the RDCR must 
be configured to 16x clock mode and the receiver decoding method must be NRZI. 
Notice that the transmitter (ENT) and receiver (ENR) have not been enabled. For 
inverted infrared operation, set GSMR_L[RINV, TINV]. 


24.Set the PPMR-HDLC to 0x1000 to configure two opening and one closing flag, 
16-bit CCITT-CRC, and prevention of multiple frames in the FIFO. 


25. Write 0x0108 for a 1.152 Mbps infrared rate or 0x0084 for a 0.576 Mbps infrared 
rate to IRSIP. When working with timer 2 as the SIP trigger, the values should be 
Ox2108 for a 1.153 Mbps infrared or 0x2084 for a 0.572 Mbps. 


26. Write 0x0003 to IRMODE to enable the infrared and to set the mode of operation to 
middle-speed. 


27.Program the TMR2 register when working with Timer 2 as the SIP trigger. 


28.Write 0x00028830 to GSMR_L to enable the SCC2 transmitter and receiver. This 
additional write ensures that the ENT and ENR bits are enabled last. 


Note that after 5 bytes and CRC have been sent, the TxBD is automatically closed. Once a 
complete frame is received, the RxBD is closed. Data received after 256 bytes or a single 
frame causes a busy (out-of-buffers) condition since only one RxBD is prepared. 


29.7 High-Speed IrDA Programming Example 


High-speed infra-red programming is very similar to SCC transparent programming. The 
parameter RAM programming and the RxBD and TxBD are the same as in the SCC 
transparent mode, described in Chapter 28, “SCC Transparent Mode.” The SCC2 and 
infrared registers must be initialized. The following is an initialization sequence for a 
high-speed infrared channel. The transmitter and receiver are both enabled. Both transmit 
and receive clocks are provided externally to MPC850 using CLK3. 


1. Configure the port A pins to enable the TXD2 and RXD2 pins. Set PAPAR[12,13] 
and clear PADIR[12,13]. Clear PAODR[12,13]. 
2. Configure port A to enable CLK3. Set PAPAR[5]. Clear PADIR[5]. 


3. Connect CLK3 to SCC2 using the serial interface. Write SICR[R2CS] and 
SICR[T2CS] to 0b110. 


4. Connect the SCC2 to the NMSI (its own set of pins). Clear SICR[SC2]. 
5. Write the SDCR with the appropriate arbitration ID. 


SRERRRRRRRRRERERERRERRROORIRRRRAPARARRARRR IORI AREA EER ROR RIE CRORE ROO ROI EC OOOO SOOT ORONO ERROR RRR BARREN ACER ORES CREEL EERE EER ORC RRR III ROR NEEL ETI OEE LOO ORE POOL OREROR RRR RRP RISER O OER TER 


SERCRRERERRRRARRE RARER RRR ER ROO ROR IOS OL LRTI IEE ENGI GS LOGON NONLIN NIRS IONE BS REBELS ORIEN 


Part V. The Communications Processor Module 


6. Write RBASE and TBASE in the SCC2 parameter RAM to point to the RxBD and 
TxBD in the dual-port RAM. Assuming one RxBD followed by one TxBD at the 
beginning of dual-port RAM, write RBASE with 0x2000 and TBASE with 0x2008. 


7. Program the CPCR to execute the INIT RX AND TX PARAMS command for SCC2. 
8. Write RFCR with 0x18 and TFCR with 0x18 for normal operation. 


9. Write MRBLR with the maximum number of bytes per receive buffer. For this case, 
assume 16 bytes, so MRBLR = 0x0010. 


10. Write OxOOOOFFFF to CRC_P to comply with 16-bit CRC-CCITT. For details, see 
Section 28.5, “CRC Calculation in Transparent Mode.” 


11. Write OxOOOOFOB8 to CRC_C to comply with 16-bit CRC-CCITT. 


12. Initialize the RxBD. Assume the Rx buffer is at 0x00001000 in main memory. Write 
0xBO000 to the RxBD status and control bits. Write Ox0000 to RxBD[Length] (not 
required because it is only done for instructional purposes). Write 0x00001000 to 
RxBD[Pointer]. 


13. Initialize the TxBD. Assume the Tx buffer is at OxO0002000 in main memory and 
contains five 8-bit characters. Write OxBCOO to the TxBD status and control bits. 
Write 0x0005 to TxBD[Length]. Write 0x00002000 to TxBD[Pointer]. 


14. Write OxFFFF to the SCCE-transparent to clear any previous events. 
15. Write 0x0013 to the SCCM-transparent to enable the TXE, TX, and RX interrupts. 


16. Write 0x20000000 to the CIMR to allow SCC2 to generate a system interrupt. The 
CICR should also be initialized. 


17. Write 0x00001980 to the GSMR_H to configure the transparent channel. CDS and 
CTSS must be set; TDCR, RDCR, RENC, and TENC must be cleared. 


18. Write 0x00000000 to the GSMR_L to configure CTS and CD to automatically 
control transmission and reception (DIAG field). Normal operation of the transmit 
clock is used (TCI bit is cleared). Notice that the transmitter (ENT) and receiver 
(ENR) have not been enabled yet. 


19. Write OXO31C to the IRSIP register when working with Timer 2 as the SIP trigger. 
The value should be OX231C. 


20. Write 0x0005 to the IRMODE register to enable the infrared and to set the mode of 
operation to high speed. 


21.Program TMR2 register when working with timer 2 as the SIP trigger. 
22. Write 0x00000030 to the GSMR_L to enable the SCC2 transmitter and receiver. 
This additional write ensures that ENT and ENR are enabled last. 


After 5 bytes are sent, the TxBD is automatically closed. When a complete frame is 
received, the RxBD is closed. Data received after 16 bytes or a single frame causes a busy 
(out-of-buffers) condition because only one RxBD is prepared. 
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Serial Management Controllers 


The two serial management controllers (SMCs) are full-duplex ports that can be configured 
independently to support one of three protocols—UART, transparent, or general-circuit 
interface (GCI). Simple UART operation is used to provide a debug/monitor port in an 
application, which allows the SCCs to be free for other purposes. The SMC in UART mode 
is not as complex as the SCC in UART mode. The SMC clock can be derived from one of 
the four internal baud rate generators (BRGs) or from an external clock pin. However, the 
clock should be a 16x clock. 


In totally transparent mode, the SMC can be connected to the TDM channel (such as a T1 
line) or directly to its own set of pins. The receive and transmit clocks are derived from the 
TDM channel, the internal BRGs, or from an external 1x clock. The transparent protocol 
allows the transmitter and receiver to use the external synchronization pin. The SMC in 
transparent mode is not as complex as the SCC in transparent mode. 


Each SMC supports the C/I and monitor channels of the GCI bus, for which the SMC 
connects to a time-division multiplex (TDM) channel in the serial interface (SI). 
Chapter 20, “Serial Interface,’ describes GCI interface configuration. 


The SMCs support loopback and echo modes for testing. The SMC receiver and transmitter 
are double-buffered, corresponding to an effective FIFO size (latency) of two characters. 
Figure 30-1 shows the SMC block diagram. 
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Figure 30-1. SMC Block Diagram 


The receive data source can be LIRXDa if the SMC is connected to the TDM channel of 
the SI or SMRXD if it is connected to the NMSI. Likewise, the transmit data source can be 
L1TXDa if using the TDM or SMTXD if using the NMSI. However, if SMC2 is connected 
to the NMSI, the TDM channel is unavailable since SMC2 shares its dedicated pins with 
L1TXDa and LIRXDa. 


If the SMC is connected to the TDM, the SMC receive and transmit clocks can be 
independent from each other, as defined in Chapter 20, “Serial Interface’’ However, if the 
SMC is connected to the NMSI, receive and transmit clocks must be connected to a single 
clock source (SMCLK), an internal signal name for a clock generated from the bank of 
clocks. SMCLK originates from an external pin or one of the four internal BRGs. See 
Section 20.3, “NMSI Configuration.” 


An SMC connected to the TDM derives a synchronization pulse from the TSA. An SMC 
connected to the NMSI using transparent protocol can use SMSYN for synchronization to 
determine when to start a transfer. SMSYN is not used when the SMC is in UART mode. 


30.1 SMC Features 


The following is a list of the SMC’s main features: 





¢ Each SMC can implement the UART protocol on its own pins 

e Each SMC can implement a totally transparent protocol on a multiplexed (TDM) or 
nonmultiplexed (NMSJ) line. The transparent mode can also be used for a fast 
connection between MPC850s. However, if SMC2 is connected to the NMSI, the 
TDM channel is unavailable. 

e Each SMC channel fully supports the C/I and monitor channels of the GCI (IOM-2) 
in ISDN applications 
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e Two SMCs support the two sets of C/I and monitor channels in the SCIT channels 0 
and | 


e Full-duplex operation 
e Local loopback and echo capability for testing 


30.2 Common SMC Settings and Configurations 


The following sections describe settings and configurations that are common to the serial 
management controllers. 


30.2.1 SMC Mode Registers (SMCMRn) 


The two SMC mode registers (SMCMR), shown in Figure 30-2, select the SMC mode as 
well as mode-specific parameters. The functions of SMCMR[8-—15] are the same for each 
protocol. SMCMR[0-—7] vary according to the protocol selected by SMCMR[SM]. 


r= [es [ew 
re [= [or 


R/W 
OxA82 (SMCMRA1), 0xA92 (SMCMR2) 
Figure 30-2. SMC Mode Registers (SMCMRn) 
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Table 30-1 describes SMCMR fields. 
Table 30-1. SMCMR Field Descriptions 


Reserved, should be cleared 


bit always present) + number of data bits (5-14) + number of parity bits (O or 1) + number of stop bits 
(1 or 2). For example, for 8 data bits, no parity, and 1 stop bit, the total number of bits in the character 
is 1+8+0+1=10.S0, CLEN should be programmed to 9. 

Characters range from 5—14 bits. If the data bit length is less than 8, the msbs of each byte in 
memory are not used on transmit and are written with zeros on receive. If the length is more than 8, 
the msbs of each 16-bit word are not used on transmit and are written with zeros on receive. 

The character must not exceed 16 bits. For a 14-bit data length, set SL to one stop bit and disable 
parity. For a 13-bit data length with parity enabled, set SL to one stop bit. Writing values 0 to 3 to 
CLEN causes erratic behavior. 


Character length (transparent). The values 3-15 specify 4—16 bits per character. If a character is less 
than 8 bits, the msbs of the byte in buffer memory are not used on transmit and are written with zeros 
on receive. If character length is more than 8 bits but less than 16, the msbs of the half-word in buffer 
memory are not used on transmit and are written with zeros on receive. 

Note: Using values 0—2 causes erratic behavior. Larger character lengths increase an SMC channel’s 
potential performance and lowers the performance impact of other channels. For instance, using 16- 
rather than 8-bit characters is encouraged if 16-bit characters are acceptable in the end application. 


Character length (GCI). Number of bits in the C/1 and monitor channels of the SCIT channels 0 or 1. 
Values 0-15 correspond to 1-16 bits. CLEN should be 13 for SCIT channel 0 or GCI (8 data bits, plus 
A and E bits, plus 4 C/I bits = 14 bits). It should be 15 for the SCIT channel 1 (8 data, bits, plus A and 
E bits, plus 6 C/I bits = 16 bits). 


Stop length. (UART) 
0 One stop bit. 
1 Two stop bits. 


Monitor enable. (GCI) 
0 The SMC does not support the monitor channel. 
1 The SMC supports the monitor channel. 


Parity enable. (UART) 
0 No parity. | 
1 Parity is enabled for the transmitter and receiver as determined by the PM bit. 





Byte sequence (transparent). For a character length greater than 8 bits, BS controls the byte 
transmission sequence if REVD is set. Clear BS to maintain compatibility with MC68360 QUICC. 
0 Normal mode. Should be selected if the character length is not larger than 8 bits. 

1 Transmit lower address byte first. 


J Reserved, should be cleared. (GCI) 
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Table 30-1. SMCMR Field Descriptions (Continued) 


Parity mode. (UART) 
O Odd parity. 
1 Even parity. 













Reverse data. (transparent) 
O Normal mode. 
1 Reverse the character bit order. The msb is sent first. 







SCIT channel number. (GCI) 
0 SCIT channel 0 
1 SCIT channel 1. Required for Siemens ARCOFI and SGS S/T chips. 


8-9 = Reserved, should be cleared 


10-11}SM SMC mode. 

| 00 GCI or SCIT support. 
01 Reserved. 
10 UART (must be selected for SMC UART operation). 
11 Totally transparent operation. 















Diagnostic mode. 

00 Normal operation. 

01 Local loopback mode. 
10 Echo mode. 

11 Reserved. 







| SMC transmit enable. 
0 SMC transmitter disabled. 
1 SMC transmitter enabled. 






SMC receive enable. 
0 SMC receiver disabied. 
1 SMC receiver enabled. 


30.2.2 SMC Buffer Descriptors (BDs) 


In UART and transparent modes, the SMC’s memory structure is like the SCC’s in that 
SMC-associated data is stored in buffers. Each buffer is referenced by a BD and organized 
in a BD table located in the dual-port RAM. See Figure 30-3. 
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Figure 30-3. SMC Memory Structure 


The BD table allows buffers to be defined for transmission and reception. Each table forms 
a circular queue. The CP uses BDs to confirm reception and transmission so that the 
processor knows buffers have been serviced. The data resides in external or internal buffers. 


When SMCs are configured to operate in GCI mode, their memory structure is predefined 
to be one half-word long for transmit and one half-word long for receive. For more 
information on these half-word structures, see Section 30.5, “SMC in GCI Mode.” 


30.2.3 SMC Parameter RAM 


Each SMC parameter RAM area begins at the same offset from each SMC base. The 
protocol-specific portions of the SMC parameter RAM are discussed in the sections that 
follow. The SMC parameter RAM shared by the UART and transparent protocols is shown 
in Table 30-2. Parameter RAM for GCI protocol is described in Section 30.5.1, “SMC GCI 
Parameter RAM.” 
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Table 30-2. SMC UART and Transparent Parameter RAM Memory Map 


ore | namw [wah] neon 


RBASE RxBDs and TxBDs base address. (BD table pointer) Define starting points in the 


dual-port RAM of the set of BDs for the SMC send and receive functions. They allow 
0x02 | TBASE | Hword | j exible partitioning of the BDs. By selecting RBASE and TBASE entries for all SMCs and 
by setting W in the last BD in each list, BDs are allocated for the send and receive side of 
every SMC. Initialize these entries before enabling the corresponding channel. 
Configuring BD tables of two enabled SMCs to overlap causes erratic operation. RBASE 



























and TBASE should be a multiple of eight. 


| 0x04 RFCR Byte | Rx/Tx function code. See Section 30.2.3.1, “SMC Function Code Registers 
(RFCR/TFCR).” 
x05 |TFCR 


0x06 |MRBLR | Hword | Maximum receive buffer length. The most bytes the MPC850 writes to a Rx buffer before 
moving to the next buffer. It can write fewer bytes than MRBLR if a condition like an error 
or end-of-frame occurs, but it cannot exceed MRBLR. Rx buffers should not be smaller 
than MRBLR. SMC Tx buffers are unaffected by MRBLR. 
Tx buffers can be individually given varying lengths through the data length field. MRBLR 
can be changed while an SMC is operating only if it is done in a single bus cycle with one 
16-bit move (not two 8-bit bus cycles back-to-back). This occurs when the CP shifts 
control to the next RxBD, so the change does not take effect immediately. To guarantee 
the exact RxBD on which the change occurs, change MRBLR only while the SMC 
receiver is disabled. MRBLR should be greater than zero and should be even if character 


length exceeds 8 bits. 























RSTATE Rx internal state. Can be used only by the CP. 


0x0C Word | Rx internal data pointer. ® Updated by the SDMA channels to show the next address in 
the buffer to be accessed. 


0x10 |RBPTR | Hword | RxBD pointer. Points to the next BD for each SMC channel that the receiver transfers 
data to when it is in idle state, or to the current BD during frame processing. After a reset 
or when the end of the BD table is reached, the CP initializes RBPTR to the value in 
RBASE. Most applications never need to write RBPTR, but it can be written when the 
receiver is disabled or when no receive buffer is in use. 


0x12 Hword | Rx internal byte count. A down-count value initialized with the MRBLR value and 
decremented with every byte the SDMA channels write. 
0x14 }— | Word Rx temp. 7 Can be used only by the CP. 


0x18 |TSTATE ;Word | Tx internal state. Can be used only by the CP. 
0x1C a Word | Tx internal data pointer. * Updated by the SDMA channels to show the next address in 





the buffer to be accessed. 


0x20 |TBPTR | Hword | TxBD pointer. Points to the next BD for each SMC channel the transmitter transfers data 
from when it is in idle state or to the current BD during frame transmission. After reset or 
when the end of the table is reached, the CP initializes TBPTR to the TBASE value. Most 
applications never need to write TBPTR, but it can be written when the transmitter is 


disabled or when no transmit buffer is in use. For instance, after a STOP TRANSMIT or 
GRACEFUL STOP TRANSMIT command is issued and the frame completes its transmission. 


0x22 Hword | Tx internal byte count. A down-count value initialized with the TxBD data length and 


decremented with every byte the SDMA channels read. 
Word | Tx temp. 2 Can be used only by the CP. 


0x28 Hword | First half-word of protocol-specific area. 
0x32 Last half-word of protocol-specific area. 


1 From SMC base address. SMC base = IMMR + 3E80 (SMC1), 3F80 (SMC2). 
2 Not accessed for normal operation. May hold helpful information for experienced users and for debugging. 





0x24 
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To extract data from a partially full Rx buffer, issue a CLOSE RXBD command. 


Certain parameter RAM values must be initialized before the SMC is enabled. Other values 
are initialized or written by the CP. Once values are initialized, software typically does not 
need to update them because activity centers mostly around Tx and Rx BDs rather than 
parameter RAM. However, note the following: 


© Parameter RAM can be read at any time. 


¢ Values that pertain to the SMC transmitter can be written only if SMCMR[TEN] 1s 
zero or between the STOP TRANSMIT and RESTART TRANSMIT commands. 


e Values for the SMC receiver can be written only when SMCMR[REN] is Zero, or, if 
the receiver is previously enabled, after an ENTER HUNT MODE command is issued 
but before the CLOSE RXBD command is issued and REN is set. 


30.2.3.1 SMC Function Code Registers (RFCR/TFCR) 


Each SMC channel has two function code registers—one for receiving (RFCRn) and one 
for transmitting (TFCRn). The function code entry contains the value to appear on the 
function code pins AT[1—3] when the associated SDMA channel accesses memory. The 
FCRs also control byte-ordering. See Figure 30-4. 


SMC base + 0x04 (RFCR)/SMC base + 0x05 (TFCR) 
Figure 30-4. SMC Function Code Registers (RFCR/TFCR) 





Table 30-3 describes RFCR fields. 
Table 30-3. RFCR/TFCR Field Descriptions 


Reserved, should be cleared. 


Byte ordering. Set BO to select the required byte ordering for the buffer. If BO is changed on-the-fly, it 
takes effect at the beginning of the next frame (Ethernet, HDLC, and transparent) or at the beginning of 
the next BD. See Appendix A, “Byte Ordering.” 

00 Reserved 

01 PowerPC little-endian. 

1x Big-endian or true little-endian. 


5-7 | AT[1-—3] | Address type 1-3. Contains the user-defined function code value used during the SDMA channel 
| memory access. AT[O] is always driven high to identify this channel access as a DMA-type access. 





30.2.4 Disabling SMCs On-the-Fly 


An SMC can be disabled and reenabled later by ensuring that buffers are closed properly 
and new data is transferred to or from a new buffer. Such a sequence is required if the 
parameters to be changed are not dynamic. If the register or bit description states that 
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on-the-fly changes are allowed, the sequences need not be followed and the register or bits 
may be changed directly. 


Note that the SMC does not have to be fully disabled for parameter RAM to be modified. 
Table 30-2 describes when parameter RAM values can be modified. To disable the USB, 
SCCs, SMCs, SPI, and the I?C, use CPCR[RST] to reset the CPM. 


30.2.4.1 SMC Transmitter Full Sequence 
Follow these steps to fully enable or disable the SMC transmitter: 


1. If the SMC is sending data, issue a STOP TRANSMIT command to stop transmission 
smoothly. If the SMC is not sending, this command is not required. 


2. Clear SMCMR[TEN] to disable the SMC transmitter and put it in reset state. 


3. Update SMC transmit parameters, including the parameter RAM. To switch 
protocols or reinitialize parameters, issue an INIT TX PARAMETERS command. 


4. Issue a RESTART TRANSMIT if an INIT TX PARAMETERS was not issued in step 3. 


5. Set SMCMR[TEN]. Transmission now begins using the TxBD that the TBPTR 
value points to as soon as the R bit is set in that TxBD. 


30.2.4.2 SMC Transmitter Shortcut Sequence 

This shorter sequence reinitializes transmit parameters to the state they had after reset. 
1. Clear SMCMR[TEN]. | 
2. Make any changes, then issue an INIT TX PARAMETERS command. 
3. Set SMCMR[TEN]. 


30.2.4.3 SMC Receiver Full Sequence | 


Follow these steps to fully enable or disable the receiver: 


1. Clear SMCMR[REN]. Reception is aborted immediately, which disables the SMC 
receiver and puts it in a reset state. 


2. Modify SMC receive parameters, including parameter RAM. To switch protocols or 
reinitialize SMC receive parameters, issue an INIT RX PARAMETERS command. 


3. Issue a CLOSE RXBD command if INIT RX PARAMETERS was not issued in step 2. 


4. Set SMCMR[REN]. Reception immediately uses the RxBD that RBPTR points to 
if E is set in that RxBD. | 


30.2.4.4 SMC Receiver Shortcut Sequence 


—This shorter sequence reinitializes receive parameters to their state after reset. 
1. Clear SMCMR[REN]. 
2. Make any changes, then issue an INIT RX PARAMETERS command. 
3. Set SMCMR[REN]. 


PRREREISS LOSS PLO ORG ESS BOSSE GS SORES REESE EBSRGES ESS ORES RGSS EEE REESE ESS ESSE EES 
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30.2.4.5 Changing SMC Protocols 
To switch the protocol that the SMC is executing without resetting the board or affecting 
the other SMC, follow these steps: 

1. Clear SMCMR[REN, TEN]. 


2. Make any SMCMR changes, modify the parameter RAM appropriately, and issue. 
an INIT TX AND RX PARAMETERS COMMAND to initialize transmit and receive 
parameters. 


3. Set SMCMR[REN, TEN]. The SMC is now enabled with the new protocol. 


30.2.5 Saving Power 
When the SMCMR[TEN, REN] are zero, the SMC consumes very little power. 


30.2.6 Handling Interrupts In the SMC 
Follow these steps to handle an interrupt in the SMC: 


1. Once an interrupt occurs, read SMCE to identify the interrupt source. The SMCE 
bits are usually cleared at this time. 


2. Process the TxBD to reuse it if SMCE[TX] is set. Extract data from the RxBD if 
SMCE[RX] is set. To send another buffer, set R in the RxBD. 
3. Clear CISR[SMC]1]. | 


4. Execute the rfi instruction. 


30.3 SMC in UART Mode 


SMCs generally offer less functionality and performance in UART mode than do SCCs, 
which makes them more suitable for simpler debug/monitor ports instead of full-featured 
UARTs. SMCs do not support the following features in UART mode: 

e RTS,CTS, and CD signals 

e Receive and transmit sections clocked at different rates 

e Fractional stop bits 

e Built-in multidrop modes 

e Freeze mode for implementing flow control 

e Isochronous operation (1x clock) 

e Interrupts on special control character reception 

e Ability to transmit data on demand using the TODR 

e SCCS register to determine idle status of the receive pin 

e Other features for the SCCs as described in the GSMR 


However, the SMC UART frame format, shown in Figure 30-5, allows a data length of up 
to 14 bits. The SCC format supports only up to 8 bits. 


PORE EIEIO LEERES SISOS SESE SSS SSSR SSK GO ORO LEE SBS ESSE SSS SERRE EIS 
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SMCLK 
16x 
SMTXD TERE SRC RETEREIES (Ot ae ee Hihy BAAS SEER Tee ii 
| Start 5 to 14 Data Bits with the | Parity 1or2 
Bit Least Significant Bit First Bit Stop Bits 
NOTE: (Optional) 


1. Clock is not to scale. 


Figure 30-5. SMC UART Frame Format 


30.3.1 SMC UART Features 
The following list summarizes the main features of the SMC in UART mode: 
e Flexible message-oriented data structure 
e Programmable data length (5-14 bits) 
e Programmable 1 or 2 stop bits 
e Even/odd/no parity generation and checking 
e Frame error, break, and IDLE detection 
e Transmit preamble and break sequences 
e Received break character length indication 
e Continuous receive and transmit modes 


30.3.2 SMC UART-Specific Parameter RAM 


For UART mode, the protocol-specific area of the SMC parameter RAM is mapped as in 
Table 30-4. 


Table 30-4. SMC UART-Specific Parameter RAM Memory Map 


Ee 


0x28 |MAX_IDL } Hword | Maximum idle characters. When a character is received on the line, the SMC starts 
counting idle characters received. If MAX_IDL idle characters arrive before the next 
character, an idle time-out occurs and the buffer closes, which sends an interrupt 
request to the core to receive data from the buffer. An idle character is defined as a full 
character length of logic high. MAX_IDL can be used to demarcate frames in UART 
mode. Clearing MAX_IDL disables this function so idle never causes the buffer to close, 
regardless of how many idle characters are received. The length of an idle character is 
calculated as follows: 1 + data length (5 to 14) + 1 (if parity bit is used) + number of stop 
bits (1 or 2). For example, for 8 data bits, no parity, and 1 stop bit, character length is 10 
bits. 


Ox2A |IDLC Hword | Temporary idle counter. Down-counter in which the CP stores the current idle counter 
value in the MAX_IDL time-out process. 


Ox2C {|BRKLN | Hword | Last received break length. Stores the length of the last break character received and is 
the bit length of that character. For example, if the receive pin is low for 257 bit times, 
BRKLN is 0x0101 and is accurate to within one character unit of bits. For 8 data bits, no 


parity, 1 stop bit, and 1 start bit, BRKLN is accurate to within 10 bits. 


Ox2E Hword | Receive break condition counter. Counts break conditions on the line. A break condition 
may last for hundreds of bit times, yet BRKEC increments only once during that period. 
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ore 30-4. SMC UART-Specific ParaMneter RAM Memory Map (Continued) 


Creme [wmf 


character is 10 zeros. 


R MASK | Temporary bit mask. 


1 From Beret base address. SMC base = IMMR + 0x3E80 (SMC1), 0x3F80 (SMC2). 





BRKCR Hword | Break count feciater (transmit). Determines the number of break characters the UART 
controller sends when the SMC sends a break character sequence after a STOP 
TRANSMIT command. For 8 data bits, no parity, 1 stop bit, and 1 start bit, each break 


30.3.3 SMC UART Channel Transmission Process 


The UART transmitter is designed to work with almost no intervention from the core. When 
the core enables the SMC transmitter, it starts sending idles, which are defined as the full 
character length of logic high. The SMC immediately polls the first BD in the transmit 
channel BD table and once every character time after that, depending on character length. 
When there is a message to transmit, the SMC fetches data from memory and starts sending 
the message. 


When a BD data is completely written to the transmit FIFO, the SMC writes the message 
status bits into the BD and clears R. An interrupt is issued if the I bit in the BD is set. If the 
next TxBD is ready, the data from its buffer is appended to the previous data and sent over 
the transmit pin without any gaps between buffers. If the next TXBD is not ready, the SMC 
starts sending idles and waits for the next TxBD to be ready. 


By appropriately setting the I bit in each BD, interrupts can be generated after each buffer, 
a specific buffer, or each block is sent. The SMC then proceeds to the next BD. If the CM 
bit is set in the TxBD, the R bit is not cleared, allowing a buffer to be automatically resent 
next time the CP accesses this buffer. For instance, if a single TxBD is initialized with the 
CM and W bits set, the buffer is sent continuously until R is cleared in the BD. 


30.3. 4 SMC UART Channel Reception Process 


When the core enables the SMC receiver, it enters HUNT mode and waits for the ars 
character. The CP then checks the first RxBD to see if it 1s empty and starts storing 
characters in the buffer. When the buffer is full or the MAX_IDL timer expires (if enabled), 
the SMC clears the E bit in the BD and generates an interrupt if the I bit in the BD is set. If 
incoming data exceeds the buffer’s length, the SMC fetches the next BD, and, if it is empty, 
continues transferring data to this BD’s buffer. If CM is set in the RxBD, the E bit is not 
cleared, so the CP can overwrite this buffer on its next access. 


30.3.5 Data Handling Modes: Character- and Message-Oriented 


UART mode uses the same data structures as other modes. The structures support 
multibuffer operation and allows break and preamble sequences to be sent. Overrun, parity, 
and framing errors are reported via the BDs. At its simplest, the SMC UART controller 
functions in a character-oriented environment, whereas each character is sent with the 
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selected stop bits and parity. They are received into separate 1-byte buffers. A maskable 
interrupt can be generated when each buffer is received. 


Many applications can take advantage of the message-oriented capabilities that the SMC 
UART supports through linked buffers for sending or receiving. Data is handled in a 
message-oriented environment, so entire messages can be handled instead of individual 
characters. A message can span several linked buffers; each one can be sent and received as 
a linked list of buffers without core intervention, which simplifies programming and saves 
processor overhead. In a message-oriented environment, an idle sequence is used as the 
message delimiter. The transmitter can generate an idle sequence before starting a new 
message and the receiver can close a buffer when an idle sequence is found. 


30.3.6 SMC UART Commands 


Table 30-5 describes transmit commands issued to the CPCR. 


Table 30-5. Transmit Commands 


fmf 


STOP Disables transmission of characters on the transmit channel. If the SMC UART controller receives this 

TRANSMIT command while sending a message, it stops sending. The SMC UART controller finishes sending any 
data that has already been sent to its FIFO and shift register and then stops sending data. The TBPTR is 
not advanced when this command is issued. The SMC UART controller sends a programmable number 
of break sequences and then sends idles. The number of break sequences, which can be zero, should 
be written to the BRKCR before this command is issued to the SMC UART controller. 


RESTART Enables characters to be sent on the transmit channel. The SMC UART controller expects it after 
TRANSMIT disabling the channel in its SMCMR and after issuing the STOP TRANSMIT command. The SMC UART 
controller resumes transmission from the current TBPTR in the channel’s TxBD table. 


INIT TX Initializes transmit parameters in this serial channel’s parameter RAM to their reset state and should only 
PARAMETERS | be issued when the transmitter is disabled. The INIT TX AND RX PARAMETERS Command can also be used 
to reset the transmit and receive parameters. 





Table 30-6 describes receive commands issued to the CPCR. 


Table 30-6. Receive Commands 


Command Description | 
ENTER HUNT MODE | Use the CLOSE RXBD command instead of ENTER HUNT MODE for an SMC UART channel. 


CLOSE RXBD Forces the SMC to close the current RxBD if it is currently being used and to use the next BD in 
the list for any subsequently received data. If the SMC is not receiving data, no action is taken. 


INIT RX Initializes receive parameters in this serial channel parameter RAM to reset state. Issue it only if 
PARAMETERS the receiver is disabled. INIT TX AND RX PARAMETERS resets both receive and transmit parameters. 





30.3.7 Sending a Break 


A break is an all-zeros character without stop bits. It is sent by issuing a STOP TRANSMIT 
command. After sending any outstanding data, the SMC sends a character of consecutive 
zeros, the number of which is the sum of the character length, plus the number of start, 
parity, and stop bits. The SMC sends a programmable number of break characters 
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according to BRKCR and then reverts to idle or sends data if a RESTART TRANSMIT ts issued 
before completion. When the break completes, the transmitter sends at least one idle 
character before sending any data to guarantee recognition of a valid start bit. 


30.3.8 Sending a Preamble 


A preamble sequence provides a way to ensure that the line is idle before a new message 
transfer begins. The length of the preamble sequence is constructed of consecutive ones that 
are one character long. If the preamble bit in a BD is set, the SMC sends a preamble 
sequence before sending that buffer. For 8 data bits, no parity, 1 stop bit, and 1 start bit, a 
preamble of 10 ones would be sent before the first character in the buffer. If no preamble 
sequence is sent, data from two ready transmit buffers can be sent on the transmit pin with 
no delay between them. 


30.3.9 Handling Errors in the SMC UART Controller 


The SMC UART controller reports character reception errors via the channel RxBD status 
fields and the SMC event register (SMCE). Table 30-7 shows the possible UART receiving 
errors. The SMC UART controller has no transmission errors. 


Table 30-7. SMC UART Errors 


few [me 


Overrun The SMC maintains a two-character length FIFO for receiving data. Data is moved to the buffer after the 


first character is received into the FIFO; if a receiver FIFO overrun occurs, the channel writes the 


| received character into the internal FIFO. It then writes the character to the buffer, closes it, sets 











RxBD[OV], and generates the RX interrupt if it is enabled. Reception then resumes as normal. 
Overrun errors that occasionally occur when the line is idle can be ignored. 










The channel writes the received character to the buffer, closes it, sets the PR bit in the BD, and 
generates the RX interrupt if it is enabled. Reception then resumes as normal. 





An idle is found when a character of all ones is received, at which point the channel counts consecutive 
idle characters. If the count reaches MAX_IDL, the buffer is closed and an RX interrupt is generated. If 
no receive buffer is open, this does not generate an interrupt or any status information. The idle counter 
is reset each time a character is received. 

















The SMC received a character with no stop bit. When it occurs, the channel writes the received 
character to the buffer, closes the buffer, sets FR in the BD, and generates the RX interrupt if it is 
enabled. When this error occurs, parity is not checked for the character. 







The SMC receiver received an all-zero character with a framing error. The channel increments BRKEC, 
generates a maskable BRK interrupt in SMCE, measures the length of the break sequence, and stores 
this value in BRKLN. If the channel was processing a buffer when the break was received, the buffer is 
closed with the BR bit in the RxBD set. The RX interrupt is generated if it is enabled. 
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30.3.10 SMC UART Receive BD (RxBD) 


The CP reports information about the received data in each buffer’s RxBD, shown in 
Figure 30-6. The CP then closes the current buffer, generates a maskable interrupt, and 
starts receiving data into the next buffer after one of the following occurs: 


e An error is received during message processing 
e A full receive buffer is detected 
e A programmable number of consecutive idle characters are received 


Data Length 


Rx Buffer Pointer 





Figure 30-6. SMC UART Receive BD (RxBD) 


Table 30-8 describes SMC UART RxBD status and control fields. 
Table 30-8. SMC UART RxBD Status and Control Field Descriptions 





0 The buffer is full or data reception stopped due to an error. The core can read or write any fields of 
this RxBD. The CP does not use this BD while E is zero. 

1 The buffer is empty or reception is in progress. This RxBD and its buffer are owned by the CP. Once 

E is set, the core should not write any fields of this RxBD. 












Wrap (last BD in RxBD table). 
0 Not the last BD in the table. 
1 Last BD in the table. After this buffer is used, the CP receives incoming data into the first BD that 

RBASE points to in the table. The number of RxBDs in this table is determined only by the W bit and 
overall space constraints of the dual-port RAM. 

















Interrupt. 

0 No interrupt is generated after this buffer is filled. 

1 The SMCE[RX] is set when this buffer is completely filled by the CP, indicating the need for the core 
to process the buffer. RX can cause an interrupt if it is enabled. 


as [- | Reserved, should be cleared’. 


tL Continuous mode. 


0 Normal operation. 












1 The CP does not clear the E bit after this BD is closed, allowing the CP to automatically overwrite 
the buffer when it next accesses the BD. However, E is cleared if an error occurs during reception, 
regardless of how CM is set. 











Buffer closed on reception of idles. Set when the buffer has closed because a programmable number | 
of consecutive idle sequences is received. The CP writes ID after received data is in the buffer. 


Reserved, should be cleared 
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Table 30-8. SMC UART RxBD Status and Control Field Descriptions (Continued) 


feel aoe 
fa bane Buffer closed on reception of break. Set when the buffer closes because a break sequence was 


received. The CP writes BR after the received data is in the buffer. 

a 
Parity error. Set when a character with a parity error is received in the last byte of the buffer. A new 
buffer is used for additional data. The CP writes PR after received data is in the buffer. 

3 [— | Reserved, should be cleared 


14. |OV Overrun. Set when a receiver overrun occurs during reception. The CP writes OV after the received 
data is in the buffer. 


15 |= Reserved, should be cleared — 


Data length represents the number of octets the CP writes into the buffer. After data is 
received in the buffer, the CP only writes the data length once as the BD closes. Note that 
the memory allocated for this buffer should be no smaller than MRBLR. The Rx buffer 
pointer points to the first location of the buffer and must be even. The buffer can be in 
internal or external memory. Figure 30-7 shows an example of how RxBDs are used in 
receiving 10 characters, an idle period, and five characters (one with a framing error). The 
example assumes that MRBLR = 8. 







Framing error. Set when a character with a framing error is received and located in the last byte of this 
buffer. A framing error is a character with no stop bit. A new receive buffer is used to receive additional 
data. The CP writes FR after the received data is in the buffer. 
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Receive BD 0 MRBLR = 8 Bytes for this SMC 
E ID Buffer 


Status 
Length 0008 


Pointer 32-Bit Buffer Pointer Buffer Full 8 Bytes 






































_v_ 
Receive BD 1 
E ID Buffer 
Status A 
Length 0002 
Pointer 32-Bit Buffer Pointer Idle Time-Out 
Occurred 
Receive BD 2 
F ID FR Butter 
























































































Status Byte 1 
Length 0004 Byte 2 
Pointer 32-Bit Buffer Pointer Byte 4 has Byte 3 
Framing Error Pye 
Byte 4 Error! 
Receive BD 3 | 
= Buffer 
Status A 
Length XXXX 
| 8 Bytes 
Pointer 32-Bit Buffer Pointer Reception | 
. Still in Progress 
with this Buffer Y 
x 10 Characters | 5 Characters 7 
- > ~<t- 






Long Idle Period 





Characters I 
Received by UART 


Time Fourth Character — Present 


has Framing Error! Time 


Figure 30-7. SMC UART Receiving using RxBDs 


30.3.11 SMC UART Transmit BD (TxBD) 


Data is sent to the CPM for transmission on an SMC channel by arranging it in buffers 
referenced by descriptors in the channel’s TxBD table. Using the BDs, the CP confirms 
transmission or indicates error conditions so that the processor knows the buffers have been 
serviced. 
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el a eee 


| Data Length 


Tx Buffer Pointer 





Figure 30-8. SMC UART Transmit BD (TxBD) 


Table 30-9 describes SMC UART TxBD status and control fields. 
Table 30-9. SMC UART TxBD Status and Control Field Descriptions 


eee 


Ready 

0 The buffer is not ready for transmission; BD and its buffer can be altered. The CP clears R after the 
buffer has been sent or an error occurs. 

1 The buffer has not been completely sent. This BD must not be updated while R is set. 


Someed Reserved, should be cleared. 


Wrap (final BD in the TxBD table) 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CP receives incoming data into the first BD that 
TBASE points to. The number of TxBDs in this table is determined only by the W bit and overall 

space constraints of the dual-port RAM. 



















Interrupt 
0 No interrupt is generated after this buffer is serviced. 
1 The SMCE[TX] is set when this buffer is serviced. TX can cause an interrupt if it is enabled. 










Preamble 
0 No preamble sequence is sent. 
1 The UART sends one all-ones character before it sends the data so that the other end detects an 


oe Reserved, should be cleared. 
Continuous mode 
0 Normal operation. 
1 The CP does not clear R after this BD is closed and automatically retransmits the buffer when it 
accesses this BD next. 
idle line before the data is received. If this bit is set and the data length of this BD is zero, only a 
preamble is sent. 
e15]— Reserved, should be cleared. 
Data length represents the number of octets that the CP should transmit from this BD’s 
buffer. It is never modified by the CP and normally is greater than zero. It can be zero if P 
is set, in which case only a preamble is sent. If there are more than 8 bits in the UART 
character, data length should be even. For example, to transmit three UART characters of 
8-bit data, 1 start, and 1 stop, initialize the data length field to 3. To send three UART 


characters of 9-bit data, 1 start, and 1 stop, the data length field should 6, because the three 
9-bit data fields occupy three half words in memory (the 9 LSBs of each half word). 
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Tx buffer pointer points to the first location of the buffer. It can be even or odd, unless the 
number of data bits in the UART character is greater than 8 bits, in which case the buffer 
pointer must be even. For instance, the pointer to 8-bit data, 1 start, and 1 stop characters 
can be even or odd, but the pointer to 9-bit data, 1 start, and 1 stop characters must be even. 
The buffer can reside in internal or external memory. 


30.3.12 SMC UART Event Register (SMCE)/Mask Register (SMCM) 


The SMC event register (SMCE) generates interrupts and report events recognized by the 
SMC UART channel. When an event is recognized, the SMC UART controller sets the 
corresponding SMCE bit. SMCE bits are cleared by writing ones; writing zeros has no 
effect. The SMC mask register (SMCM) has the same bit format as SMCE. Setting an 
SMCM bit enables, and clearing it disables, the corresponding interrupt. All unmasked bits 
must be cleared before the CP clears the internal interrupt request. 


ee a 
OxA86 (SMCE1), 0xA96 (SMCE2)/ OxA8A (SMCM1), OxA9A (SMCM2) 
Figure 30-9. SMC UART Event Register (SMCE)/Mask Register (SMCM) 










Table 30-10 describes SMCE/SMCM fields. 
Table 30-10. SMCE/SMCM Field Descriptions 


occurs, this interrupt occurs only once after the first all-zeros character is received. 


BSY | Busy condition. Set when a character is received and discarded due to a lack of buffers. Set no 
sooner than the middle of the last stop bit of the first receive character for which there is no available 
buffer. Reception resumes when an empty buffer is provided. 








W 






O1 


EE 










X | Tx buffer. Set when the transmit data of the last character in the buffer is written to the transmit FIFO. 


Wait two character times to ensure that data is completely sent over the transmit pin. 






buffer. Set when a buffer is received and its associated RxBD is closed. Set no sooner than the 
middle of the last stop bit of the last character that is written to the receive buffer. 
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Figure 30-10 shows an example of the timing of various events in the SMCE. 


Characters 
Received by SMC UART 


10 Characters 
Time ——> < Line Idle 


RXD Line Idle | | | | | | | | | | | | Break | 


RX RX BRK BRKE 





SMC UART SMCE 
Events 


NOTES: 
1. The first RX event assumes receive buffers are 6 bytes each. 
2. The second RX event position is programmable based on the MAX_IDL value. 
3. The BRK event occurs after the first break character is received. 





Characters 
7 Charact 
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TXD Line Idle | | | | | | | | Lineldle 
_ SMC UART SMCE = 
Events 
NOTES: 


1. The TX event. assumes all seven characters were put into a single buffer, and the TX event occurred when the seventh 
character was written to the SMC transmit FIFO. 


Figure 30-10. SMC UART Interrupts Example 


30.3.13 SMC UART Controller Programming Example 


The following initialization sequence assumes 9,600 baud, 8 data bits, no parity, and | stop 
bit in a 25-MHz system. BRG1 and SMC1 are used. 


1. Configure the port B pins to enable SMTXD1 and SMRXD1. Set PBPAR[24, 25] 
then clear PBDIR[24, 25] and PRODR[?24, 25]. 


| 2. Configure the BRG1. Write BRGC1 with 0x01_0144. The DIV 16 bit is not used and 
the divider is 162 (decimal). The resulting BRG1 clock is 16x the preferred bit rate. 


3. Connect BRG1 to SMC1 using the SI. Clear SIMODE[SMC1, SMCICS]. 


4. Assuming one RxBD at the beginning of dual-port RAM followed by one TxBD, 
write RBASE with 0x0000 and TBASE with 0x0008. 


Write 0x0091 to CPCR to execute the INIT RX AND TX PARAMETERS eemainand’ 
Initialize the SDMA configuration register (SDCR) to 0x0001. 


Write RFCR and TFCR with 0x10 for normal operation. 


Write MRBLR with the maximum number of bytes per receive buffer. Assume 16 
bytes, so MRBLR = 0x0010. 


9. Write MAX_IDL with 0x0000 in the SMC UART-specific parameter RAM to 
disable the MAX_IDL functionality for this example. 


10.Clear BRKLN and BRKEC in the SMC aoa parameter RAM. 
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11.Set BRKCR to 0x0001; if a STOP TRANSMIT COMMAND is issued, one break 
character is sent. 


12.Initialize the RxBD. Assume the Rx buffer is at 0xO0000_1000 in main memory. 
Write 0OxBO00 to Rx_BD_Status, 0x0000 to Rx_BD_Length (not required), and 
0x0000_ 1000 to Rx_BD_ Pointer. 


13. Assuming the Tx buffer is at Ox00002000 in main memory and contains five 8-bit 
characters, write OxBO00 to Tx_BD_Status, 0x0005 to Tx_BD_Length, and 
0x00002000 to Tx_BD_ Pointer. 

14. Write OxFF to the SMCE register to clear any previous events. 

15. Write 0x17 to the SMCM register to enable all possible SMC interrupts. 


16. Write 0x00000010 to the CIMR so the SMC1 can generate a system interrupt. 
Initialize the CICR. 


17. Write 0x4820 to SMCMR to configure normal operation (not loopback), 8-bit 
characters, no parity, 1 stop bit. The transmitter and receiver are not yet enabled. 


18. Write 0x4823 to SMCMR to enable the SMC transmitter and receiver. This 
additional write ensures that the TEN and REN bits are enabled last. 


After 5 bytes are sent, the TxBD is closed. The receive buffer closes after receiving 16 
bytes. Subsequent data causes a busy (out-of-buffers) condition since only one RxBD is 
ready. 


30.4 SMC in Transparent Mode 


Compared to the SCC in transparent mode, the SMCs generally have less functionality, 
simpler functions and slower speeds. Transparent mode is selected by setting 
SMCMR[SM] to 0b11. Section 30.2.1, “SMC Mode Registers (SMCMRn),’ describes 
other protocol-specific bits in the SMCMR. The SMC in transparent mode does not support 
the following features: 


e Independent transmit and receive clocks, unless connected to the TDM channel of 
the SI 


e CRC generation and checking 
¢ Full RTS, CTS, and CD signals (supports only one SMSYN signal) 
e Ability to transmit data on demand using the TODR 
e Receiver/transmitter in transparent mode while executing another protocol 
e 4-,8-, or 16-bit SYNC recognition 
e Internal DPLL support 
However, the SMC in transparent mode provides a data character length option of 4 to 16 


bits, whereas the SCCs provide 8 or 32 bits, depending on GSMR[RFW]. The SMC in 
transparent mode is also referred to as the SMC transparent controller. 
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30.4.1 SMC Transparent Mode Features 

The following list summarizes the features of the SMC in transparent mode: 
¢ Flexible buffers | — | 
* Can connect to a TDM bus using the TSA in the SI | 


e Can transmit and receive transparently on its own set of pins using a sync pin to 
synchronize the beginning of transmission and reception to an external event 


e Programmable character length (4—16) 
e Reverse data mode | 


e Continuous transmission and reception modes 


30.4.2 SMC Transparent-Specific Parameter RAM 


The protocol-specific parameter RAM for the SMC in transparent mode is reserved. Only 
the general SMC parameter RAM is used. See Section 30.2.3, “SMC Parameter RAM.’” 


30.4.3 SMC Transparent Channel Transmission Process 


The transparent transmitter is designed to work with almost no core intervention. When the 
core enables the SMC transmitter in transparent mode, it starts sending idles. The SMC 
immediately polls the first BD in the transmit channel BD table and once every character 
time, depending on the character length (every 4 to 16 serial clocks). When there is a 
message to transmit, the SMC fetches the data from memory and starts sending the message 
when synchronization is achieved. 


Synchronization can be achieved in two ways. First, when the transmitter is connected to a 
TDM channel, it can be synchronized to a time slot. Once the frame sync is received, the 
transmitter waits for the first bit of its time slot before it starts transmitting. Data is sent only 
during the time slots defined by the TSA. Secondly, when working with its own set of pins, 
the transmitter starts sending when SMSYN«x 1s asserted. 


When a BD data is completely written to the transmit FIFO, the L bit is checked and if it is 
set, the SMC writes the message status bits into the BD and clears the R bit. It then starts 
transmitting idles. When the end of the current BD is reached and the L bit is not set, only 
R is cleared. In both cases, an interrupt is issued according to the I bit in the BD. By 
appropriately setting the I bit in each BD, interrupts can be generated after each buffer, a 
specific buffer, or each block is sent. The SMC then proceeds to the next BD. If no 
additional buffers have been presented to the SMC for transmission and the L bit was 
cleared, an underrun is detected and the SMC begins sending idles. 


If the CM bit is set in the TxBD, the R bit is not cleared, so the CP can overwrite the buffer 
on its next access. For instance, if a single TxBD is initialized with the CM and W bits set, 
the buffer is sent continuously until R is cleared in the BD. 





30-22 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part V. The Communications Processor Module 


30.4.4 SMC Transparent Channel Reception Process 


When the core enables the SMC receiver in transparent mode, it waits for synchronization 
before receiving data. Once synchronization is achieved, the receiver transfers the incoming 
data into memory according to the first RxBD in the table. Synchronization can be achieved 
in two ways. First, when the receiver is connected to the TDM channel, it can be 
synchronized to a time slot. Once the frame sync is received, the receiver waits for the first 
bit of its time slot to occur before reception begins. Data is received only during the time 
slots defined by the TSA. Secondly, when working with its own set of pins, the receiver 
starts reception when SMSYN<«x 1s asserted. 


When the buffer full, the SMC clears the E bit in the BD and generates an interrupt if the I 
bit in the BD is set. If incoming data exceeds the buffer length, the SMC fetches the next 
BD; if it is empty, the SMC continues transferring data to this BD’s buffer. If the CM bit is 
set in the RxBD, the E bit is not cleared, so the CP can automatically overwrite the buffer 
on its next access. 


30.4.5 Using SMSYN for Synchronization 


The SMSYN signal offers a way to externally synchronize the SMC channel. This method 
differs somewhat from the synchronization options available in the SCCs and should be 
studied carefully. See Figure 30-11 for an example. 


Once SMCMR[REN] is set, the first rising edge of SMCLK that finds SMSYN low causes 
the SMC receiver to achieve synchronization. Data starts being received or latched on the 
same rising edge of SMCLK that latched SMSYN. This is the first bit of data received. The 
receiver does not lose synchronization again, regardless of the state of SMSYN, until REN 
is cleared. 


Once SMCMR[TEN] is set, the first rising edge of SMCLK that finds SMSYN low 
synchronizes the SMC transmitter which begins sending ones asynchronously from the 
falling edge of SMSYN. After one character of ones is sent, if the transmit FIFO is loaded 
(the TxBD is ready with data), data starts being send on the next falling edge of SMCLK 
after one character of ones is sent. If the transmit FIFO is loaded later, data starts being sent 
after some multiple number of all-ones characters is sent. 
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Note that regardless of whether the transmitter or receiver uses SMSYN, it must make 
glitch-free transitions from high-to-low or low-to-high. Glitches on SMSYN can cause 
erratic behavior of the SMC. 


The transmitter and receiver never lose synchronization again, regardless of the state of 
SMSYN, until the TEN bit is cleared or an ENTER HUNT MODE command is issued. 


SMSYN 


t f t t SMC1 Transmit Data t 





TEN set SMSYN Tx FIFO Five 1s First bit of Transmission 
here detected loaded assume first 5-bit could begin 
low here approximately character transmit here if Tx FIFO 
here length character not loaded 
equals 5 (Isb) in time 
SMSYN 





suo [7 


REN set SMSYN First bit 
here or detected _ of receive NOTES: 


SMC1 Receive Data 





ENTER HUNT lowhere data 1. SMCLK is an internal clock derived from an externa! 
MODE (Isb) CLKx or a baud rate generator. 
command 2. This example shows the SMC receiver and transmitter 
issued enabled separately. If the REN and TEN bits were set at 


the same time, a single falling edge of SMSYN would 
synchronize both. : 


Figure 30-11. Synchronization with SMSYNx 


If both SMCMR[REN] and SMCMR[TEN] are set, the first falling edge of SMSYN causes 
both the transmitter and receiver to achieve synchronization. The SMC transmitter can be 
disabled and reenabled and SMSYN can be used again to resynchronize the transmitter 
itself. Section 30.2.4, “Disabling SMCs On-the-Fly,” describes how to safely disable and 
reenable the SMC. Simply clearing and setting TEN may be insufficient. The receiver can 
also be resynchronized this way. 


30.4.6 Using TSA for Synchronization 


The TSA offers an alternative to using SMSYN to internally synchronize the SMC channel. 
This method is similar, except that the synchronization event is the first time-slot for this 
SMC receiver/transmitter after the frame sync indication rather than the falling edge of 
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SMSYN. Chapter 20, “Serial Interface,’ describes how to configure time slots. The TSA 
allows the SMC receiver and transmitter to be enabled simultaneously and synchronized 
separately; SMSYN does not provide this capability. Figure 30-12 shows synchronization 
using the TSA. 





TDM Tx CLK 
TDM Tx SYNC | | 
SMC1 SMC1 
TDM Tx 
After TEN If SMC runs out of Tx buffers and new ones 
is set, are provided later, transmission begins at 
transmission the beginning of either time slot. 
begins here. 
TDM Rx CLK 
TDM Rx SYNC | | 


TDM Rx 





SMC1 SMC1 


After REN is set or after 
ENTER HUNT MODE command, 
reception begins here. 


Figure 30-12. Synchronization with the TSA 


Once SMCMR[REN] is set, the first time-slot after the frame sync causes the SMC receiver 
to achieve synchronization. Data is received immediately, but only during defined receive 
time slots. The receiver continues receiving data during its defined time slots until REN is 
cleared. If an ENTER HUNT MODE command is issued, the receiver loses synchronization, 
closes the buffer, and resynchronizes to the first time slot after the frame sync. 


Once SMCMR[TEN] is set, the SMC waits for the transmit FIFO to be loaded before trying 
to achieve synchronization. If only a single time slot in a TDM frame is assigned to the 
SMC, SMC transmission, as well as reception, is always synchronized to the beginning of 
that time slot. If multiple time slots in a TDM frame are assigned to the SMC (as shown in 
Figure 30-12), then synchronization depends on the order of initialization. 
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When the transmit FIFO is loaded, synchronization and transmission begins depending on 
the following: 


¢ Ifa buffer is made ready before the SMC is enabled, the first byte is placed in time 
slot 1 if CLEN is 8 and to slot 2 if CLEN 1s greater than 8. 


e Ifa buffer is made ready after its SMC is enabled, the first byte can appear in any 
time slot associated with this channel. | 


e Ifa buffer is closed with BD[L] set, then the next buffer can appear in any time slot 
associated with this channel. 


If the SMC runs out of transmit buffers and a new buffer is provided later, idles are sent in 
the gap between buffers. Data transmission from the later buffer begins at the start of an 
SMC time slot, but not necessarily the first time slot after the frame sync. So, to maintain a 
certain bit alignment beginning with the first time slot, make sure that at least one TxBD is 
always ready and that underruns do not occur. Otherwise, the SMC transmitter should be 
disabled and reenabled. Section 30.2.4, “Disabling SMCs On-the-Fly,’ describes how to 
safely disable and reenable the SMC. Simply clearing and setting TEN may not be enough. 


30.4.7 SMC Transparent Commands 
Table 30-11 describes transmit commands issued to the CPCR. 


Table 30-11. SMC Transparent Transmit Commands 


STOP After hardware or software is reset and the channel is enabled in the SMCMR, the channel is in 

TRANSMIT transmit enable mode and polls the first BD. This command disables transmission of frames on the 
transmit channel. If the transparent controller receives this command while sending a frame, it stops 
after the contents of the FIFO are sent (up to 2 characters). The TBPTR is not advanced to the next BD, 
no new BD is accessed, and no new buffers are sent for this channel. The transmitter sends idles until 
a RESTART TRANSMIT Command is issued. 


RESTART Starts or resumes transmission from the current TBPTR in the channel TxBD table. When the channel 

TRANSMIT receives this command, it polls the R bit in this BD. The SMC expects. this command after a STOP 
TRANSMIT is issued. The channel is disabled in its mode register or after a transmitter error occurs. In 
addition, the transmitter awaits resynchronization before transmission continues. 


INIT TX Initializes transmit parameters in this serial channel to reset state. Use only if the transmitter is 
PARAMETERS | disabled. The INIT TX AND RX PARAMETERS Command resets transmit and receive parameters. 
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Table 30-12 describes receive commands issued to the CPCR. 


Table 30-12. SMC Transparent Receive Commands 


seem 


ENTER HUNT | Forces the SMC to close the current receive BD if it is in use and to use the next BD for subsequent 
data. If the SMC is not receiving data, the buffer is not closed. Additionally, this command causes the 
receiver to wait for a resynchronization before reception resumes. 


CLOSE RXBD | Forces the SMC to close the current receive BD if it in use and to use the next BD in the list for 
| subsequent received data. If the SMC is not in the process of receiving data, no action is taken. 





INIT RX Initializes receive parameters in this serial channel to reset state. Use only if the receiver is disabled. 
PARAMETERS | The INIT TX AND RX PARAMETERS Command resets receive and transmit parameters. 


30.4.8 Handling Errors in the SMC Transparent Controller 
The SMC uses BDs and the SMCE to report message transmit and receive errors. 
Table 30-13. SMC Transparent Error Conditions 


se 


Underrun | The channel stops sending the buffer, closes it, sets UN in the BD, and generates a TXE interrupt if it is 
enabled. The channel resumes sending after a RESTART TRANSMIT command. Underrun cannot occur 
between frames. 












The SMC maintains an internal FIFO for receiving data. If the buffer is in external memory, the CP begins 
programming the SDMA channel when the first character is received into the FIFO. If a FIFO overrun 

occurs, the SMC writes the received data character over the previously received character. The previous 
character and its status bits are lost. Then the channel closes the buffer, sets OV in the BD, and generates 
the RX interrupt if it is enabled. Reception continues as normal. 


30.4.9 SMC Transparent Receive BD (RxBD) 


Using BDs, the CP reports information about the received data for each buffer and closes 
the current buffer, generates a maskable interrupt, and starts to receive data into the next 
buffer after one of the following events: 


e An overrun error occurs. 
e A full receive buffer is detected. 


e The ENTER HUNT MODE command is issued. 


Figure 30-13 shows the SMC transparent RxBD format. 


es ere a 


Data Length 


Rx Buffer Pointer 





Figure 30-13. SMC Transparent Receive BD (RxBD) 
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Table 30-14 describes SMC transparent RxBD fields. 
Table 30-14. SMC Transparent RxBD Field Descriptions 


CS 


0 The buffer i is:full or reception was aborted due to an error. The core can read or write any fields of © 
this RxBD. The CP does not use this BD while E = 0. 

1 The buffer is empty or is receiving data. The CP owns this RxBD and its buffer. Once E is set, the 
core should not write any fields of this RxBD. 


Wrap (last BD in RxBD table). 

0 Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CP receives incoming data into the first BD that 
RBASE points to. The number of RxBDs is determined only by the W bit and overall space 
constraints of the dual-port RAM. 


Interrupt. 

0 No interrupt is generated after this buffer is filled. 

1 SMCE[RX] is set when the CP completely fills this buffer indicating that the core must process the 
buffer. The RX bit can cause an interrupt if it is enabled. 


45 j- | Reserved, should be cleared. 


Continuous mode. 

0 Normal operation. 

1 The CP does not clear E after this BD is closed, allowing the buffer to be overwritten when the CP 
next accesses this BD. However, E is cleared if an error occurs during reception, regardless of how 


CM i is set. 


Ls al Reserved, should be cleared. 


OV Overrun. Set when a receiver overrun occurs during reception. The CP writes OV after the received 
data is placed into the buffer. 


eo Reserved, should be cleared. 


Data length and buffer pointer fields are described in Section 21.3, “SCC Buffer 
Descriptors Ce = 





30.4.10 SMC Transparent Transmit BD (TxBD) 


Data is sent to the CPM for transmission on an SMC channel by arranging it in buffers 
referenced by the channel TxBD table. The CP uses BDs to confirm transmission or 
indicate error conditions so the processor knows buffers have been serviced. 


Figure 30-14 shows the SMC transparent TxBD format. 
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5 a CT 


| » 2 Data Length 


Tx Buffer Pointer 





Figure 30-14. SMC Transparent Transmit BD (TxBD) 


Table 30-15 describes SMC transparent TxBD fields. 
Table 30-15. SMC Transparent TxBD Field Descriptions 






Ready. 

O The buffer is not ready for transmission. The BD and buffer can be updated. The CP clears R after 
the buffer is sent or after an error occurs. 

1 The user-prepared buffer is not sent or is being sent. BD fields must not be updated if R is set. 








Wrap (final BD in table). 

O Not the last BD in the table. 

1 Last BD in the table. After this buffer is used, the CP receives incoming data into the first BD that 
TBASE points to. The number of TxBDs in this table is programmable and determined by the W bit 

and overall space constraints of the dual-port RAM. 









Interrupt. 

0 No interrupt is generated after this buffer is serviced unless an error occurs. 

1 SMCE[TX] or SMCE[TXE] are set when the buffer is serviced. They can cause interrupts if they are 
enabled. 

Note that this bit does not mask SMCE[TXE]. 










Last in message. 

0 The last byte in the buffer is not the last byte in the transmitted transparent frame. Data from the next 
transmit buffer (if ready) is sent immediately after the last byte of this buffer. 

1 The last byte in this buffer is the last byte in the transmitted transparent frame. After this buffer is 

sent, the transmitter requires synchronization before the next buffer is sent. 


} 5 | — | Reserved, should be cleared. 


CM {Continuous mode. 
O Normal operation. 
1 The CP does not clear R after this BD is closed, allowing the buffer to be automatically resent when 





















the CP accesses this BD again. However, the R bit is cleared if an error occurs during transmission, 
regardless of how CM is set. 


7-13) — | Reserved, should be cleared. 
Underrun. Set when the SMC encounters a transmitter underrun condition while sending the buffer. . 
P15 | — | Reserved, should be cleared. | | 


Data length represents the number of octets the CP should transmit from this buffer. It is 
never modified by the CP. The data length can be even or odd, but if the number of bits in 
the transparent character is greater than 8, the data length should be even. For example, to 
transmit three transparent 8-bit characters, the data length field should be initialized to 3. 
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However, to transmit three transparent 9-bit characters, the data length field should be 
initialized to 6 because the three 9-bit characters occupy three half words in memory. 


The buffer pointer points to the first byte of the buffer. They can be even or odd, unless 
character length is greater than 8 bits, in which case the transmit buffer pointer must be 
even. For instance, the pointer to 8-bit transparent characters can be even or odd, but the 
pointer to 9-bit transparent characters must be even. The buffer can reside in internal or 
external memory. | 


30.4.11 SMC Transparent Event Register (SMCE)/Mask Register 
(SMCM) 


The SMC event register (SMCE) generates interrupts and ports events recognized by the 
SMC channel. When an event is recognized, the SMC sets the corresponding SMCE bit. 
Interrupts are masked in the SMCM, which has the same format as the SMCE. SMCE bits 
are cleared by writing ones; writing zeros has no effect. Unmasked bits must be cleared 
before the CP clears the internal interrupt request. 


Figure 30-15 shows the SMCE/SMCM register format. 





Figure 30-15. SMC eae eo oo eae aa ee (SMCM) 


Table 30-16 describes SMCE/SMCM fields. 
Table 30- 16. SMCE/SMCM Field Descriptions 


cc 


Busy condition. Set when a character is received and discarded due to a lack of buffers. Reception 
begins after a new buffer is provided, without waiting for resynchronization. To resynchronize after error 
recovery, issue an ENTER HUNT MODE command. 



















Tx buffer. Set after a buffer is sent. If the L bit of the TxBD is set, TX is set when the last character 
starts being sent. A one character-time delay is required to ensure that data is completely sent over the 
transmit pin. If the L bit of the TxBD is cleared, TX is set when the last character is written to the 
transmit FIFO. A two character-time delay is required to ensure that data is completely sent. 


Rx buffer. Set when a buffer is received (after the last character is written) on the SMC channel and its 
associated RxBD is closed. 
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30.4.12 SMC Transparent NMSI Programming Example 
The following example initializes the SMC1 transparent channel over its own set of pins. 


The CLK3 pin supplies the transmit and receive clocks; the SMSYN«x pin is used for 
synchronization. The SMC UART example shows baud-rate generator configuration. 


1. Configure the port B pins to enable SMTXD1, SMRXD1, and SMSYNI. Set 
PBPAR[23— 25] and clear PBDIR[23— 25] and PRBODR[23- 25]. 


2. Configure the port A pins to enable CLK3. Set PAPAR[5] and clear PADIR[5]. The 
other pin functions are the timers or the TSA. These alternate functions cannot be 
used on this pin. 

3. Connect CLK3 to SMC1 using the SI. Clear SSMODE|[SMC1] and set 
SIMODE[SMCICS] to 0b110. 

4. Write RBASE and TBASE in the SMC parameter RAM to point to the RxBD and 


TxBD in the dual-port RAM. Assuming one RxBD at the beginning of the dual-port 
RAM followed by one TxBD, write RBASE with 0x0000 and TBASE with 0x0008. 


5. Program the CPCR to execute the INIT RX AND TX PARAMETERS command. Write 
0x0091 to the CPCR. 


6. Write 0x0001 to the SDCR to initialize the SDCR. 
7. Write RFCR and TFCR with 0x10 for normal operation. 


8. Write MRBLR with the maximum bytes per receive buffer. Assuming 16 bytes, 
MRBLR = 0x0010. 


9. Initialize the RxBD assuming the buffer is at 0xOO00_1000 in main memory. Write 
0xB000 to RxBD[Status and Control], 0x0000 to RxBD[Data Length] (optional), 
and 0x0000_1000 to RxBD[Buffer Pointer]. 


10. Initialize the TxBD assuming the Tx buffer is at OxOO000_2000 in main memory and 
contains five 8-bit characters. Write 0xB000 to TxBD[Status and Control], 0x0005 
to TxBD[Data Length], and 0x0000_2000 to TxBD[Buffer Pointer]. 


11. Write OxFF to SMCE to clear any previous events. 
12. Write 0x13 to SMCM to enable all possible SMC interrupts. 


13. Write 0x0000_0010 to the CIMR to allow SMC1 to generate a system interrupt. The 
CICR should also be initialized. 


14. Write 0x3830 to the SMCMR to configure 8-bit characters, unreversed data, and 
normal operation (not loopback). The transmitter and receiver are not enabled yet. 


15. Write 0x3833 to the SMCMR to enable the SMC transmitter and receiver. This 
additional write ensures that TEN and REN are enabled last. 


After 5 bytes are sent, the TxBD is closed; after 16 bytes are received the receive butter is 
closed. Any data received after 16 bytes causes a busy (out-of-buffers) condition since only 
one RxBD is prepared. | 
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30.4.13 SMC Transparent TSA Programming Example 


The following is an example initialization sequence for the SMC1 transparent channel over 
the TSA. It is assumed that the TSA and the TDM pins have been set up to route time-slot 
data to the SMC transmitter and receiver. Chapter 20, “Serial Interface,” has examples for 
configuring the TSA which provides transmit and receive clocks and synchronization 
signals internally. © 


1. Write RBASE and TBASE in the SMC parameter RAM to point to the RxBD and 
TxBD in the dual-port RAM. Assuming one RxBD at the beginning of the dual-port 
RAM followed by one TxBD, write RBASE with 0x0000 and TBASE with 0x0008. 


2. Program CPCR to execute the INIT TX AND RX PARAMETERS command. Write 
Ox0091 to the CPCR. 

3. Initialize the SDCR to 0x0001. 

4. Write RFCR and TFCR with 0x10 for normal operation. 


5. Write MRBLR with the maximum number of bytes per receive buffer. Assume 16 
bytes, so MRBLR = 0x0010. 


6. Initialize the RxBD and assume the Rx buffer is at 0x0000_ 1000 in main memory. 
Write 0OxBO00 to RxBD[Status and Control], 0x0000 to RxBD[Data Length] 
(optional), and 0xO000_1000 to RxBD[Buffer Pointer]. 


7. Initialize the TxBD and assume the Tx buffer is at 0xO000_2000 in main memory 
and contains five 8-bit characters. Write 0xBOOO to TxBD[Status and Control], 
0x0005 to TxBD[Data Length], and 0x0000_2000 to Beene Pointer]. 


8. Write OxFF to SMCE to clear any previous events. 
9. Write 0x13 to SMCM to enable all possible SMC interrupts. 


10. Write 0Ox0000_0010 to the CIMR SO » SMC1 can generate a system interrupt. 
Initialize CICR. 

11.Set SMCMR to 0x3830 for 8-bit characters, unreversed data, and normal operation 
(not loopback). The transmitter and receiver are not enabled yet. 


12. Write 0x3833 to SMCMR to enable the SMC transmitter and receiver. This 
additional write ensures that TEN and REN are enabled last. 


30.5 SMC in GCI Mode 


A single SMC can control both the C/I and monitor channels of a GCI frame. When using 
the SCIT configuration of GCI, one SMC can handle SCIT channel 0 and the other can 
handle SCIT channel 1. The main features of the SMC in GCI mode are as follows: 


e Each SMC channel can support both the C/I and monitor channels of the GCI 
(IOM-2) in ISDN applications 

¢ Two SMCs support both sets of C/I and monitor channels in SCIT channels 0 and 1 

e Full-duplex operation 

¢ Local loopback and echo inane for peas 
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To use the SMC GCI channels properly, the TSA must be configured to route the monitor 
and C/I channels to the preferred SMC. Chapter 20, “Serial Interface,” describes how to 
program this configuration. GCI mode is selected by programming SMCMR[SM] to 0b00. 
Section 30.2.1, “SMC Mode Registers (SMCMRn),” describes other protocol-specific 
SMCMR bits. 


30.5.1 SMC GCI Parameter RAM 


The SMC GCI parameter RAM area begins at the same offset from each SMC base. The 
parameter RAM differs from that for UART and transparent mode. In GCI mode, parameter 
RAM contains both the BDs and their buffers. Compare Table 30-17 with Table 30-2 to see 
the differences. In GCI mode the SMC has no protocol-specific parameter RAM. 

Table 30-17. SMC GCI Parameter RAM Memory Map 


a 
[eo [W-Re60 | RoW anv A See Senn "SC GON hal BD 
[ete [e-Te80_[ vo [ochre T6058 -SMCGOIGN Chara BO? 


1 SMC base = IMMR + 0x3E80 (SMC1), 0x3F80 (SMC2). 
2 RSTATE, M_RxD, M_TxD, CI_RxD, and Cl_TxD do not need to be accessed by the user in normal operation, 
and are reserved for CP use only. 









30.5.2 Handling the GCI Monitor Channel 


The following sections describe how the GCI monitor channel is handled. 


30.5.2.1 SMC GCI Monitor Channel Transmission Process 


Monitor channel 0 is used to exchange data with an OSI layer 1 device (reading and writing 
internal registers and transferring of the S and Q bits). In SCIT configuration, monitor 
channel | is used for programming and controlling voice/data modules such as CODECs. 
The core writes the byte into the TxBD. The SMC sends the data on the monitor channel 
and handles the A and E control bits according to the GCI monitor channel protocol. The 
TIMEOUT command resolves deadlocks when errors in the A and E bit states occur on the 
data line. 
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30.5.2.1.1 SMC GCI Monitor Channel Reception Process 


The SMC receives data and handles the A and E control bits according to the GCI monitor 
channel protocol. When the CP stores a received data byte in the SMC RxBD, a maskable 
interrupt is generated. A TRANSMIT ABORT REQUEST command causes the MPC850 to send 
an abort request on the E bit. 


30.5.3 Handling the GCI C/I Channel 


The C/I channel is used to control the OSI layer 1 device. The OSI layer 2 device in the TE 
sends commands and receives indication to or from the upstream layer | device through C/I 
channel 0. In the SCIT configuration, C/I channel 1 is used to convey real-time status 
information between the layer 2 device and nonlayer 1 peripheral devices (CODECs). 


30.5.3.1 SMC GCI C/I Channel Transmission Process 


The core writes the data byte into the C/I TxBD and the SMC transmits the data 
continuously on the C/I channel to the physical layer device. 


30.5.3.2 SMC GCI C/i Channel Reception Process 


The SMC receiver continuously monitors the C/I channel. When it recognizes a change in 
the data and this value is received in two successive frames, it 1s interpreted as valid data. 
This is called the double last-look method. The CP stores the received data byte in the C/I 
RxBD and a maskable interrupt is generated. If the SMC is configured to support SCIT 
channel 1, the double last-look method is not used. 


30.5.4 SMC GCI Commands 
The commands in Table 30-18 are issued to the CPCR. 
Table 30-18. SMC GCI Commands 


Description 


INIT TX AND RX Eat transmit and receive parameters in the parameter RAM to their reset state. 
PARAMETERS 


TRANSMIT This receiver command can be issued when the MPC850 implements the monitor channel 
ABORT REQUEST | protocol. When it is issued, the MPC850 sends an abort request on the A bit. 


| TIMEOUT This transmitter command can be issued when the MPC850 implements the monitor channel 
protocol. It is usually issued because the device is not responding or A bit errors are detected. The 
MPC850 sends an abort request on the E bit at the time this command is issued. 





30.5.5 SMC GCI Monitor Channel RxBD 


The GCI monitor channel RxBD, shown in Figure 30-16, is used by the CP to por on the 
monitor channel receive byte. The RxBD itself receives the monitor data. 





fomercol et [er |us 


Figure 30-16. SMC GCI Monitor Channel RxBD 
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Table 30-19 describes SMC monitor channel RxBD fields. 
Table 30-19. SMC Monitor Channel RxBD Field Descriptions 


CC 
Empty. 
0 The CP clears E when the byte associated with this BD is available to the core. 
1 The core sets E when the byte associated with this BD has been read. 


Last (EOM). Set when the EOM indication is received on the E bit. Note that when this bit is set, the 
| data byte is invalid. 


2 ER | Error condition. Set when an error occurs on the monitor channel protocol. The error condition indicates 
that a new byte was sent before the SMC acknowledged the previous byte. 


MS _ | Data mismatch. Set when two different consecutive bytes are received; cleared when the last two 
consecutive bytes match. The SMC waits for the reception of two identical consecutive bytes before 
writing new data to the RxBD. 


}4-7) — | Reserved, should be cleared. 
}8-15| Data | Data field. Contains the monitor channel data byte that the SMC received. 





30.5.6 SMC GCI Monitor Channel TxBD 


The CP uses the GCI monitor channel TxBD, shown in Figure 30-17, to report on the 
monitor channel transmit byte. The TxBD itself contains the monitor data to be sent. 





Figure 30-17. SMC GCI Monitor Channel TxBD 


Table 30-20 describes SMC monitor channel TxBD fields. 
Table 30-20. SMC Monitor Channel TxBD Field Descriptions 


ES 


Ready. 
| 0 Cleared by the CP after transmission. The TxBD is now available to the core. 

1 Set by the core when the data byte associated with this BD is ready for transmission. 

1 L Last (EOM). When L = 1, the SMC first transmits the buffer data and then transmits the EOM 
ice on the E bit. 

AR Abort request. Set by the SMC when an abort request is received on the A bit. The transmitter sends 

the EOM on the E bit after receiving an abort request. 

7 {| Reserved, should be cleared. 

8-15 Data Data field. Contains the data to be sent by the SMC on the monitor channel. 
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30.5.7 SMC GCI C/A Channel RxBD 


The GCI C/I channel RxBD, shown in Figure 30-18, is used by the CP to report on the C/I 
channel receive byte. The RxBD itself receives the C/I data. 






Figure 30-18. SMC C/i Channel RxBD 


Table 30-21 describes SMC C/I channel RxBD fields 
Table 30-21. SMC C/I Channel RxBD Field Descriptions 


eee fe 


Empty. 

0 Cleared by the CP to indicate that the byte associated with this BD is available to the core. 
1 The core sets E to indicate that the byte associated with this BD has been read. 

Note that additional data received is discarded until E bit is set. 


H-7 [= | Reserved, should be cleared. . 
8-13 | C/I Data |} Command/indication data bits. For C/I channel 0, bits 10-13 contain the 4-bit data field and bits 
8~9 are always written with zeros. For C/I channel 1, bits 8-13 contain the 6-bit data field. 


14-15 Reserved, should be cleared. 





30.5.8 SMC GCI C/I Channel TxBD 


The GCI C/I channel TxBD, shown in Figure 30-19, is used by the CP to report on the C/I 
channel transmit byte. The TxBD itself contains the C/I data to be sent. 





Figure 30-19. SMC C/A Channel TxBD 


Table 30-22 describes SMC C/I channel TxBD fields. 
Table 30-22. SMC C/A Channel TxBD Field Descriptions 


0 Cleared by the CP after transmission to indicate that the BD is available to the core. 
1 Set by the core when data associated with this BD is ready for transmission. 


Reserved, should be cleared. 


Command/indication data bits. For C/! channel 0, bits 10—13 hold the 4-bit data field (bits 8 and 9 
should be written with zeros). For C/I channel 1, bits 8—13 contain the 6-bit data field. 


Reserved, should be cleared. 
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30.5.9 SMC GCI Event Register (SMCE)/Mask Register (SMCM) 


The SMCE generates interrupts and reports events recognized by the SMC channel. When 
an event is recognized, the SMC sets its corresponding SMCE bit. SMCE bits are cleared 
by writing ones; writing zeros has no effect. SMCM has the same bit format as SMCE. 
Setting an SMCM bit enables, and clearing an SMCM bit disables, the corresponding 
interrupt Unmasked bits must be cleared before the CP clears the internal interrupt request 
to the CP interrupt controller (CPIC). Figure 30-20 shows the SMCE/SMCM register 
format. 










es 
: OxA86 (SMCE1), 0xA96 (SMCE2)/ OxA8A (SMCM1), OxA9A (SMCM2) 
Figure 30-20. SMC GCI Event Register (SMCE)/Mask Register (SMCM) 





Table 30-23 describes SMCE/SMCM fields. 


Table 30-23. SMCE/SMCM Field Descriptions 
elem 
GN a 
[i onto caret bier arene Seven be maior tane Buerbocones mH 


MRXB j{ Monitor channel buffer received. Set when the monitor receive buffer becomes full 
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Serial Peripheral Interface 


The serial peripheral interface (SPI) allows the MPC850 to exchange data between other 
MPC850 chips, the MC68360, the MC68302, the M68HC11 and M68HCO05 
microcontroller families, and peripheral devices such as EEPROMsS, real-time clocks, A/D 
converters, and ISDN devices. 


The SPI is a full-duplex, synchronous, character-oriented channel that supports a four-wire 
interface (receive, transmit, clock and slave select). The SPI block consists of transmitter 
and receiver sections, an independent baud rate generator, and a control unit. The 
transmitter and receiver sections use the same clock, which is derived from the SPI baud 
rate generator in master mode and generated externally in slave mode. During an SPI 
transfer, data is sent and received simultaneously. 


Because the SPI receiver and transmitter are double-buffered, as shown in Figure 31-1, the 
effective FIFO size (latency) is 2 characters. The SPI’s msb is shifted out first. When the 
SPI is disabled in the SPI mode register (SPMODE[EN] = 0), it consumes little power. 


IMB Peripheral Bus 










SPI Mode Register 

















BRGCLK 


SPISEL SPIMOSI SPIMISO SPICLK 





Figure 31-1. SPI Block Diagram 
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31.1 Features 


The following is a list of the SPI’s main features: 


¢ Four-signal interface (SPIMOSI, SPIMISO, SPICLK, and SPISEL) 
e Full-duplex operation 

¢ Works with data characters from 4 to 16 bits long 

e Supports back-to-back character transmission and reception 

e Master or slave SPI modes supported 

e Multimaster environment support 

e Continuous transfer mode for autoscanning of a peripheral 


-¢ Supports maximum clock rates of 6.25 MHz in master mode and 12.5 MHz in slave 
mode, assuming a 25-MHz system clock ; 


e Independent programmable baud rate generator 

e Programmable clock phase and polarity 

e Open-drain outputs support multimaster configuration 
e Local loopback capability for testing | 


31.2 SPI Clocking and Signal Functions 


The SPI can be configured as a slave or as a master in single- or multiple-master 
environments. The master SPI generates the transfer clock SPICLK using the SPI baud rate 
generator (BRG). The SPI BRG takes its input from BRGCLK, which is generated in the 
MPC850 clock synthesizer. | 


SPICLK is a gated clock, active only during data transfers. Therefore, SPI clock rates can 
be very high, up to BRGCLK/4 in master mode or BRGCLK/2 in slave mode. Note, 
however, that this high clock rate can be supported only over the period of a single 
character, if messages consist of multiple back-to-back characters, operation becomes 
limited by CPM performance, and thus the clock rate should be adjusted down accordingly. 
CPM bandwidth required by the SPI channel should be calculated as the maximum rate that 
back-to-back characters must be transmitted and received. Four combinations of SPICLK 
phase and polarity can be configured with SPMODE[CI, CP]. SPI signals can also be 
configured as open-drain to support a multimaster configuration in which a shared SPI 
signal is driven by the MPC850 or an external SPI device. 


The SPI master-in slave-out SPIMISO signal acts as an input for master devices and as an 
output for slave devices. Conversely, the master-out slave-in SPIMOSI signal is an output 
for master devices and an input for slave devices. The dual functionality of these signals 
allows the SPIs in a multimaster environment to communicate with one another using a 
common hardware configuration. | 
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¢ When the SPI is a master, SPICLK is the clock output signal that shifts received data 
in from SPIMISO and transmitted data out to SPIMOSI. SPI masters must output a 
slave select signal to enable SPI slave devices by using a separate general-purpose 
I/O signal. Assertion of an SPI’s SPISEL, while it is in master mode, causes an error. 


e When the SPI is a slave, SPICLK is the clock input that shifts received data in from 
SPIMOSI and transmitted data out through SPIMISO. SPISEL is the enable input to 
the SPI slave. 


e Ina multimaster environment, SPISEL (always an input) is also used to detect when 
more than one master is operating, which is an error condition. 


As described in Chapter 34, “Parallel I/O Ports?’ SPIMISO, SPIMOSI, SPICLK, and 
SPISEL are multiplexed with port B[28—31] signals, respectively. They are configured as 
SPI signals through the port B signal assignment register (PBPAR) and the Port B data 
direction register (PBDIR), specifically by setting PBPAR[DDn] and PBDIR[DRn]}. 











31.3 Configuring the SP! Controller 


The SPI can be programmed to work in a single- or multiple-master environment. This 
section describes SPI master and slave operation in a single-master configuration and then 
discusses the multi-master environment. 


SPI transmission and reception will always be enabled simultaneously. If the transmit or 
receive function is not needed, the user can point the associated channel of a non-ready 
TXBD or RxBD, and simply ignore the resultant Tx underrun or Rx busy errors. 


31.3.1 The SPI as a Master Device 


In master mode, the SPI sends a message to the slave peripheral, which sends back a 
simultaneous reply. A single master MPC850 with multiple slaves can use general-purpose 
parallel I/O signals to selectively enable slaves, as shown in Figure 31-2. To eliminate the 
multimaster error in a single-master environment, the master’s SPISEL input can be forced 
inactive by selecting port B[31] for general-purpose I/O (PBPAR[DD31] = 0). 
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SPICLK 








The SPISEL 
decoder can be 
either internal or 

external logic. 























Figure 31-2. Single-Master/Multi-Slave Configuration 


To start exchanging data, the core writes the data to be sent into a buffer, configures a TxBD 
with TxBD[R] set, and configures one or more RxBDs. The core then sets SPCOM[STR] 
in the SPI command register to start sending data, which starts once the SDMA channel 
loads the Tx FIFO with data. | 


The SPI then generates programmable clock pulses on SPICLK for each character and 
simultaneously shifts Tx data out on SPIMOSI and Rx data in on SPIMISO. Received data 
is written into a Rx buffer using the next available RxBD. The SPI keeps sending and 
receiving characters until the whole buffer is sent or an error occurs. The CPM then clears 
TxBD[R] and RxBD[E] and issues a maskable interrupt to the CPM interrupt controller 
(CPIC). 


When multiple TxBDs are ready, TxBD[L] determines whether the SPI keeps transmitting 
without SPCOM[STR] being set again. If the current TxBD[L] is cleared, the next TxBD 
is processed after data from the current buffer is sent. Typically there is no delay on 
SPIMOSI between buffers. If the current TxBD[L] is set, sending stops after the current 
buffer is sent. In addition, the RxBD is closed after transmission stops, even if the Rx buffer 
is not full; therefore, Rx buffers need not be the same length as Tx buffers. 
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31.3.2 The SPI as a Slave Device 


In slave mode, the SPI receives messages from an SPI master and sends a simultaneous 
reply. The slave’s SPISEL must be asserted before Rx clocks are recognized; once SPISEL 
is asserted, SPICLK becomes an input from the master to the slave. SPICLK can be any 
frequency from DC to BRGCLK/2 (12.5 MHz for a 25-MHz system). 








To prepare for data transfers, the slave’s core writes data to be sent into a buffer, configures 
a TxBD with TxBD[R] set, and configures one or more RxBDs. The core then sets 
SPCOM|[STR] to activate the SPI. Once SPISEL is asserted, the slave shifts data out from 
SPIMISO and in through SPIMOSI. A maskable interrupt is issued when a full buffer 
finishes receiving and sending or after an error. The SPI uses successive RxBDs in the table 
to continue reception until it runs out of Rx buffers or SPISEL is negated. 








Transmission continues until no more data is available or SPISEL is negated. If it is negated 
before all data is sent, it stops but the TxBD stays open. Transmission continues once 
SPISEL is reasserted and SPICLK begins toggling. After the characters in the buffer are 
sent, the SPI sends ones as long as SPISEL remains asserted. 








31.3.3 The SPI in Multi-master Operation 


The SPI can operate in a multimaster environment in which SPI devices are connected to 
the same bus. In this configuration, the SPIMOSI, SPIMISO, and SPICLK signals of all 
SPlIs are shared; the SPISEL inputs are connected separately, as shown in Figure 31-3. Only 
one SPI device can act as master at a time—all others must be slaves. When an SPI is 
configured as a master and its SPISEL input is asserted, a multimaster error occurs because 
more than one SPI device is a bus master. The SPI sets SPIE[ MME] in the SPI event register 
and a maskable interrupt is issued to the core. It also disables SPI operation and the output 
drivers of SPI signals. The core must clear SPMODE[EN] before the SPI is used again. 
After correcting the problems, clear SPIE[MME] and reenable the SPI. 
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Notes: 
° All signals are open-drain 
¢ For a multi-master system with more than two masters, SPISEL and SPIE[MME] 
will not detect all possible conflicts 
* It is the responsibility of software to arbitrate for the SPI bus (with token passing, for example) 
* SELOUTx signals are implemented in software with general-purpose I/O signals 


Figure 31-3. Multimaster Configuration 
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31.4 SPI Registers 


The following sections describe the registers used in configuring and operating the SPI. 


31.4.1 SPI Mode Register (SPMODE) 


The SPI mode register (SPMODE), shown in Figure 31-4, controls both the SPI operation 
mode and clock source. 







0000_00 on 0_0000_| Bae ee S 


Figure 31-4. SPI Mode Register (SPMODE) 






Table 31-1 describes the SPMODE fields. 
Table 31-1. SPMODE Field Descriptions 


a 
=| Reserved, should be cleared. 


1 LOOP | Loop mode. Enables local loopback operation. 
0 Normal operation. 
1 Loopback mode. The transmitter output is internally connected to the receiver input. The receiver 


and transmitter operate normally, except that received data is ignored. 


Clock invert. Inverts SPI clock polarity. See Figure 31-5 and Figure 31 6. 
0 The inactive state of SPICLK is low. 
1 The inactive state of SPICLK is high. 


Clock phase. Selects the transfer format. See Figure 31-5 and Figure 31-6. 
0 SPICLK starts toggling at the middle of the data transfer. 
1 SPICLK starts toggling at the beginning of the data transfer. 


Reverse data. Determines the receive and transmit character bit order. 
O Reverse data—lIsb of the character sent and received first. 
1 Normal operation—msb of the character sent and received first. 


Master/slave. Selects master or slave mode. 

0 The SPI is a slave. 

1 The SPI is a master. 

Note that master/slave mode is undefined at reset. 


4 DIV 16 | Divide by 16. Selects the clock source for the SPI baud rate generator when configured as an SPI 
master. In slave mode, SPICLK is the clock source. 
0 BRGCLK is the input to the SPI BRG. 
1 BRGCLK/16 is the input to the SPI BRG. 


7 Enable SPI. Do not change other SPMODE bits when EN is set. 
0 The SPI is disabled. The SPI is in a reset state and consumes minimal power. The SPI BRG is not 
functioning and the input clock is disabled. 


1 The SPI is enabled. 
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Table 31-1. SPMODE Field Descriptions (Continued) 


i 


LEN | Character length in bits per character. Must be between 0011 (4 bits) and 1111 (16 bits). A value less 


than 4 causes erratic behavior. If the value is not greater than a byte, every byte in memory holds LEN 
valid bits. If the value is greater than a byte, every half-word holds LEN valid bits. See 
Section 31.4.1.2, “SP! Examples with Different SPMODE[LEN] Values.” 





12-15 Prescale modulus select. Specifies the divide ratio of the prescale divider in the SPI clock generator. | 
BRGCLK is divided by 4 * ([PMO—PM3] + 1), a range from 4 to 64. The clock has a 50% duty cycle. 


31.4.1.1 SPI Transters with Different Clocking Modes 


Figure 31-5 shows the SPI transfer format in which SPICLK starts toggling in the middle 
of the transfer (SPMODE[CP] = 0). 


SPICLK (Cl = 0) 


SPICLK — (Cl=1) 


From Master) cmb XX XX XX) 


SPIMISO 


from Slavey ——K_ms>_ XXX XXX Xb XO) 


NOTE: Q = Undefined Signal. 


Figure 31-5. SPI Transfer Format with SPMODE[CP} =0 








Figure 31-6 shows the SPI transfer format in which SPICLK starts + toggling at the 
beginning of the transfer (SPMODE[CP] = a | 


SPICLK (Cl = 0) 


SPICLK — (Cl=1) 


From Master) wham eancendcecenetesaticl 
Slave) Ka K mb XX X KX XX Xo) 


(From Slave) 











SPISEL 





NOTE: Q = Undefined Signal. 


Figure 31-6. SPI Transfer Format with SPMODE[CP] = 1 
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31.4.1.2 SPI Examples with Different SPMODE[LEN] Values 


The examples below show how SPMODE[LEN] is used to determine character length. To 
help map the process, the conventions shown in Table 31-2 are used in the examples. 


Table 31-2. Example Conventions 


ee 
ee 







Original byte boundary 
Original 4-bit boundary. 


For all examples below, assume the memory contains the following binary image: 





‘Both and _ are used to aid readability. 


msb ghij_klmn__opqr_stuv lsb 
Example 1 


with LEN=4 (data size=5), the following data is selected: 
msb Xxxxj_klmn_ xxxr_stuv lsb 


with REV=0, the order of the string appearing on the line is: 
first nmlk_j vuts_r last 


with REV=1, the order of the string appearing on the line is: 
first j_klmn__r_stuv last 


Example 2 


with LEN=7 (data size=8), the following data is selected: 
msb ghij_klmn_ opqr_stuv lsb 


with REV=0, the string transmitted is: 


first nmlk_ jihg  vuts_rqpo last 
with REV=1, the string is transmitted: 
first ghij_klmn_ opqr_stuv last 


Example 3 


with LEN=0xC (data size=13), the following data is selected: 
msb ghij_klmn_ xxxr_stuv lsb 


with REV=0, the string transmitted: 
first nmlk jihg vuts_r last 


with REV=1, the string is transmitted: 
first ghij_klmn_r_ stuv last 
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31.4.2 SPI Event/Mask Registers (SPIE/SPIM) 


The SPI event register (SPIE) generates interrupts and reports events recognized by the SPI. 
When an event is recognized, the SPI sets the corresponding SPIE bit. Clear SPIE bits by 
writing a 1—writing 0 has no effect. Setting a bit in the SPI mask register (SPIM) enables 
and clearing a bit masks the corresponding interrupt. Unmasked SPIE bits must be cleared 
before the CPM clears internal interrupt requests. Figure 31-7 shows both registers. 















es 
a 
| R/W 


OxAAG (SPIE); OxAAA (SPIM) = 


Figure 31-7. SPI Event/Mask Registers (SPIE/SPIM) 






Table 31-3 describes the SPIE/SPIM fields. 
Table 31-3. SPIE/SPIM Field Descriptions 


Reserved, should be cleared. 
Multimaster error. Set when SPISEL is asserted externally while the SPI is in master mode. 










jo) 












Tx error. Set when an error occurs during transmission. | 
4 [= | Reserved, should be cleared 
BSY | Busy. Set after the first character is received but discarded because no Rx buffer is available 







31.4.3 SPI Command Register (SPCOM) 
The SPI command register (SPCOM), shown in Figure 31-8, is used to start SPI operation. 





Figure 31-8. SP! Command Register (SPCOM) 
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Table 31-4 describes the SPCOM fields. 
Table 31-4. SPCOM Field Descriptions 


Ea 


i STR | Start transmit. For an SPI master, setting STR causes the SPI to start transferring data to and from the 








Tx/Rx buffers if they are prepared. For a slave, setting STR when the SPI is idle causes it to load the Tx 
data register from the SPI Tx buffer and start sending with the next SPICLK after SPISEL is asserted. 
STR is cleared automatically after one system clock cycle. 


7 [= Reserved and should be cleared. 
31.5 SPI Parameter RAM 


The SPI parameter RAM area begins at the SPI base address. It is similar to the SCC 
general-purpose parameter RAM. Some values must be user-initialized before the SPI is 
enabled; the CPM initializes the others. Once initialized, parameter RAM values do not 
usually need to be accessed. They should be changed only when the SPI is inactive. 
Table 31-5 shows the memory map of the SPI parameter RAM. 


Table 31-5. SP! Parameter RAM Memory Map 


[soe [we] mm 


| RBASE | Hword | Rx/Tx BD table base address. Indicate where the BD tables begin in the dual-port RAM. 


Setting Rx/TxBD[W] in the last BD in each BD table determines how many BDs are 
TBASE | Hword 


allocated for the Tx and Rx sections of the SPI. Initialize RBASE/TBASE before enabling 
the SPI. Furthermore, do not configure BD tables of the SPI to overlap any other active 

RFCR_ | Byte 

TFCR Byte 


controller’s parameter RAM. 

Ox06 | MRBLR | Hword | Maximum receive buffer length. The SPI has one MRBLR entry to define the maximum | 
number of bytes the MPC850 writes to a Rx buffer before moving to the next buffer. The 
MPC850 can write fewer bytes than MRBLR if an error or end-of-frame occurs, but never 
exceeds the MRBLR value. User-supplied buffers should be no smaller than MRBLR. 










































Rx/Tx function code. Contains the value to appear on AT[1-3] when the associated 
SDMA channel accesses memory. Also controls byte ordering for the transfers. See 
Byte | section 31.5.1, “Receive/Transmit Function Code Registers (RFCR/TFCR).” 
















RBASE and TBASE should be divisible by eight. 

Tx buffers are unaffected by MRBLR and can have varying lengths; the number of bytes 
to be sent is programmed in TxBD[Data Length]. 

MRBLR is not intended to be changed while the SPI is operating. However it can be 
changed in a single bus cycle with one 16-bit move (not two 8-bit bus cycles 
back-to-back). The change takes effect when the CPM moves control to the next RxBD. 
To guarantee the exact RxBD on which the change occurs, change MRBLR only while 
the SPI receiver is disabled. MRBLR should be greater than zero; it should be an even 
number if the character length of the data exceeds 8 bits. 


| RSTATE Word | Rx internal state. Reserved for CPM use. 


0x0C = The Rx internal data pointer @ is updated by the SDMA channels to show the next 
en ae in the buffer to be accessed. 


0x10 | RBPTR | Hword | RxBD pointer. Points to the current Rx BD being processed or to the next BD to be 
serviced when idle. After a reset or when the end of the BD table is reached, the CPM 
initializes RBPTR to the RBASE value. Most applications should not modify RBPTR, but 
it can be updated when the receiver is disabled or when no Rx buffer is in use. 
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Table 31-5. SPI Parameter RAM Memory Map (Continued) 


Ce 


The Rx internal byte count® is a down-count value that is initialized with the MRBLR value 
and decremented with every byte the SDMA channels write. 
Rx temp. Reserved for CPM use. 
TSTATE Tx internal state. Reserved for CPM use. 
0x1C Word |The Tx internal data pointer? is updated by the SDMA channels to show the next address 
in the buffer to be accessed. 


0x20 | TBPTR_ | Hword | TxBD pointer. Points to the current Tx BD during frame transmission or the next BD to be 
processed when idle. After reset or when the end of the Tx BD table is reached, the CPM 
initializes TBPTR to the TBASE value. Most applications do not need to modify TBPTR, 
| but it can be updated when the transmitter is disabled or when no Tx buffer is in use. 
0x22 Hword | The Tx internal byte count? is a down-count value initialized with TxBD[Data Length]and 
decremented with every byte read by the SDMA channels. 
Word | Tx temp. Reserved for CPM use. 


Note: The user must initialize only items in bold. 


' From SPI base. SPI base = IMMR + 0x3D80. 
2 Normally, these parameters need not be accessed. They are listed to help experienced users in debugging. 





















(31.5.1 Receive/Transmit Function Code Registers (RFCR/TFCR) 


Figure 31-9 shows the fields in the receive/transmit function code registers (RFCR/TFCR) 


0000_0000 
R/W 
SP! Base + 04 (RFCR)/SPI Base + 05 (TFCR) 
Figure 31-9. Receive/Transmit Function Code Registers (RFCR/TFCR) 





Table 31-6 describes the RFCR/TFCR fields. | 
Table 31-6. RFCR/TFCR Field Descriptions 


elem aoe 
o-2f— Reserved, should be cleared. 


Byte ordering. Set BO to select the required byte ordering for the buffer. If BO is changed on-the-fly, it 
takes effect at the beginning of the next frame or BD. See Appendix A, “Byte Ordering.” — 

00 Reserved 

01 PowerPC little-endian. 

1x Big-endian or true little-endian. 


















Address type 1-3. Contains the user-defined function code value used during the SDMA channel 
memory access. ATO is always driven high to identify this channel access as a DMA-type access. 


AT[1-3] 
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31.6 SPI Commands 


Table 31-7 lists transmit/receive commands sent to the CPM command register (CPCR). 
Table 31-7. SP! Commands 


Description 


INIT TX Initializes all transmit parameters in the parameter RAM to their reset state and should be issued only 
PARAMETERS | when the transmitter is disabled. The INIT TX AND RX PARAMETERS command can also be used to reset 
both the Tx and Rx parameters. 


CLOSE RXBD | Forces the SPI controller to close the current RxBD and use the next BD for subsequently received data. 
If the controller is not receiving data, no action is taken. Use this command to extract data from a 
partially full buffer. | 


INIT RX Initializes all receive parameters in the parameter RAM to their reset state. Should be issued only when 
PARAMETERS | the receiver is disabled. The INIT TX AND RX PARAMETERS Command can also be used to reset both the Tx 
and Rx parameters. 





31.7 The SPI Buffer Descriptor (BD) Table 


As shown in Figure 31-10, buffer descriptors (BDs) are organized into separate Rx and Tx 
BD tables in dual-port RAM. The tables have the same basic configuration as for the SCCs 
and SMCs and form circular queues that determine the order buffers are transferred. The 
CPM uses BDs to confirm reception and transmission or to indicate error conditions so that 
the core knows buffers have been serviced. The buffers themselves can be placed in external 
memory or in any unused parameter area of the dual-port RAM. 


Dual-Port RAM External Memory 










a 


TxBD Table 
eee enema 
enemecerrenrers 


Frame Status 
| DataLength —_| Length 
Buffer Pointer : 









‘Tx Buffer 






% SENOS 


TX Buffer 


Pointer to SP 
TxBD Table 





RxBD T. 


ee ee 


Pointer to SPI 
RYBD Table Frame Status 
Data Length 
Buffer Pointer = 


Figure 31-10. SPI Memory Structure 





Rx Buffer 
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31.7.1 SPI Buffer Descriptors (BDs) 


Receive and transmit BDs report information about each buffer transferred and whether a 
maskable interrupt should be generated. Each 64-bit BD, shown in Figure 31-11 and 
Figure 31-12, has the following structure: 


e The half word at offset + 0 contains status and control bits. The CPM updates the 
status bits after the buffer is sent or received. 


e The half word at offset + 2 contains the data length (in bytes) that is sent or received. 


— For an RxBD, this is the number of octets the CPM writes into this RxBD’s 
buffer once the BD closes. The CPM updates this field after the received data is 
placed into the buffer. Memory allocated for this buffer should be no smaller than 
MRBLR. 


— Fora TxBD, this is the number of octets the CPM should transmit from its buffer. 
Normally, this value should be greater than zero. If the character length is more 
than 8 bits, the data length should be even. For example, to send three characters 
of 8-bit data the data length field should be initialized to 3. However, to send 
three characters of 9-bit data, the data length field should be initialized to 6 since 
the three 9-bit data fields occupy three half-words in memory. The CPM never 
modifies this field. 


© The word at offset + 4 points to the beginning of the buffer. 


— For an RxBD, the pointer must be even and can point to internal or external 
memory. 


— Fora TxBD, the pointer can be even or odd, unless the character exceeds 8 bits, 
for which it must be even. The buffer can be in internal or external memory. 


31.7.1.1 SPI Receive BD (RxBD) 


The CPM uses RxBDs to report on each received buffer. It closes the current buffer, 
generates a maskable interrupt, and starts receiving data in the next buffer once the current 
buffer is full. The CPM also closes the buffer when the SPI is configured as a slave and 
SPISEL is negated, indicating that reception stopped. The core should write RxBD bits 
before the SPI is enabled. The format of an RxBD is shown in Figure 31-11. 





p= twtr pe p=femp = | ne | 


Data Length 


Rx Buffer Pointer 





Figure 31-11. SPI Receive BD (RxBD) 
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Table 31-8 describes the RxBD status and control fields. 
Table 31-8. SPi RxBD Status and Control Field Descriptions 


a 


| Empty. 
0 The buffer is full or stopped receiving because of an error. The core can examine or write to any fields 
of this RxBD, but the CPM does not use this BD while E = 0. 


1 The buffer is empty or reception is in progress. The CPM owns this RxBD and its buffer. Once E is set, 
the core should not write any fields of this RxBD. 


ca eet Reserved, should be cleared. 


Wrap (last BD in table). 

0 Not the last BD in the RxBD table. 

|1 Last BD in the RxBD table. After this buffer is used, the CPM receives incoming data using the BD 
pointed to by RBASE (top of the table). The number of BDs in this table is determined only by the W 


bit and overall space constraints of the dual-port RAM. 


Interrupt. 

0 No interrupt is generated after this buffer is filled. 

1 SPIE[RXB] is set when this buffer is full, indicating the need for the core to process the buffer. 
SPIE[RXB] causes an interrupt if not masked. 


Last. Updated by the SPI when the buffer is closed. In slave mode, this occurs because SPISEL was 
negated. The SPI updates L after received data is placed in the buffer. 

0 This buffer does not contain the last character of the message. 

| 1 This pulgr contains the last character of the message. 


Bed Reserved, should be eared 


| Continuous mode. Master mode only; in slave mode, CM should be cleared. 
0 Normal operation. 
1 The CPM does not clear RxBD[E] after this BD is closed; the buffer is overwritten when the CPM next 
accesses this BD. This allows continuous reception from an SPI slave into one buffer, which can be 


used, for Sxampie: for autoscanning of a serial A/D peripheral. 


rat Ressived. should be cleared. 


OV Overrun. Set when a receiver overrun occurs during reception (slave mode only). The SPI updates OV 
after the received data is placed in the buffer. 


115 Multimaster error. Set when this buffer is closed because SPISEL was asserted when the SPI was in 
Fs master mode. Indicates an arbitration problem between multiple masters on the SPI bus. The SPI 


updates ME after the received data is placed in the buffer. 





31.7.1.2 SPI Transmit BD (TxBD) 


Data to be sent with the SPI is sent to the CPM by arranging it in buffers referenced by 
TxBDs in the TxBD table. TxBD fields should be prepared before data is sent. The format 
of an TxBD is shown in Figure 31-12. 
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Data Length 


Tx Buffer Pointer 





_ Figure 31-12. SPI Transmit BD (TxBD) 
Table 31-9 describes the TxBD status and control fields. 
Table 31-9. SPI TxBD Status and Control Field Descriptions 


EC 


Ready. 
O The buffer is not ready to be sent. This BD or its buffer can be modified. The CPM clears R (unless 
| RxBD/[CM] is set) after the buffer is sent (uniess RxBD[CM] is set) or an error occurs. 


1 The buffer is ready for transmission or is being sent. The BD cannot be modified once R is set. 


f= | Reserved, should be cleared. | ) 


2 Wrap (last BD in TxBD table). 
O Not the last BD in the table. | 
| 1 Last BD in the table. After this buffer is used, the CPM receives incoming data using the BD pointed 
to by TBASE (top of the table). The number of BDs in this table is determined only by the W bit and 


overall space constraints of the dual-port RAM. 


Interrupt. 
O No interrupt is generated after this buffer is processed if an error does not occur. | 
1 SPIE[TXB] or SPIE[TXE] are set when this buffer is processed and causes interrupts if not masked. 
Note that this bit does not mask SPIE[TXE]. 
4 L Last. 
0 This buffer does not contain the last character of the message. 
11 This buffer contains the last character of the message. 
is |- | Reserved, should be cleared. 
| Continuous mode. Valid only when the SPI is in master mode. In slave mode, it should be cleared. 
0 Normal operation. 
| 1 The CPM does not clear TxBD[R] after this BD is closed, allowing the buffer to be resent 
automatically when the CPM next accesses this BD. | 


713)— Reserved, should be cleared. 


Underrun. Indicates that the SPI encountered a transmitter underrun condition while sending the buffer. 


This error occurs only when the SPI is in slave mode. The SPI updates UN after it sends the buffer. 


15 Multimaster error. Indicates that this buffer is closed because SPISEL was asserted when the SPI was 
in master mode. An arbitration problem occurred between devices on the SPI bus. The SPI updates ME 


after sending the buffer. 
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31.8 SPI Master Programming Example 
The following sequence initializes the SPI to run at a high speed in master mode: 
1. Configure port B to enable SPIMISO, SPIMOSI, and SPICLK. Set PBPAR[28, 29, 
30] and PBDIR[28, 29, 30], then clear PRODR[28, 29, 30]. 
For multimaster operation, connect the internal SPISEL input to the SPI by setting 
PBPAR[31] and PBDIR[31] and by clearing PBODR[31]. 
2. Configure a parallel I/O signal to operate as the SPI select output signal if needed. 
If PB16 is chosen, clear PRODR[16] and PBPAR[16] and set PBDIR[16]. 


3. Write RBASE and TBASE in the SPI parameter RAM to point to the RxBD and 
TxBD tables in the dual-port RAM. Assuming one RxBD followed by one TxBD at 
the beginning of the dual-port RAM, write RBASE with 0x0000 and TBASE with 
Ox0008. 


Execute the INIT RX AND TX PARAMETERS command by writing 0x0051 to CPCR. 
Write 0x0001 to the SDCR to initialize the SDMA configuration register (SDCR). 
Write RFCR and TFCR with 0x10 for normal operation. 


Write MRBLR with the maximum number of bytes per Rx buffer. For this case, 
assume 16 bytes, so MRBLR = 0x0010. 


8. Initialize the RxBD. Assume the Rx buffer is at OxO000_1000 in main memory. 
Write 0xBO00 to RxBD[Status and Control], 0x0000 to RxBD[Data Length] 
(optional), and OxO0000_1000 to RxBD[Buffer Pointer]. 


9. Initialize the TxBD. Assume the Tx buffer is at 0xO000_2000 in main memory and 
contains five 8-bit characters. Write 0xB800 to TxBDJ[Status and Control], 0x0005 
to TxBD[Data Length], and 0x0000_2000 to TxBD[Buffer Pointer]. 


10. Write OxFF to SPIE to clear any previous events. 
11. Write 0x37 to SPIM to enable all possible SPI interrupts. 


12. Write 0xO000_0020 to the CPM interrupt mask register (CIMR). This sets 
CIMR[SPI] to enable SPI-generated system interrupts. The CICR should also be 
initialized. 

13. Write 0x0370 to SPMODE to enable normal operation (not loopback), master mode, 
SPI enabled, 8-bit characters, and the fastest speed possible. 


14.Clear PBDAT[16], assuming PB16 is chosen above, to constantly assert the SPI 
select output signal. 


15.Set SPCOM[STR] to start the transfer. 


IDWS 





After 5 bytes are sent, the TxBD is closed because TxBD[L] is set. The RxBD 1s closed 
when the TxBD closes. 
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31.9 SPI Slave Programming Example 


The following is an example initialization sequence to follow when the SPI is in slave 
mode. It is very similar to the SPI master example, except that SPISEL is used instead of a 
general-purpose I/O signal (as shown in Figure 31-2). 





1. Set PBPAR[28—31] and PBDIR[28—31] to enable SPIMISO, SPIMOSI, SPICLK, 
and SPISEL, then clear PRODR[28-31]. 


2. Assuming one RxBD at the beginning of the dual-port RAM followed by one TxBD, 
write RBASE with 0x0000 and TBASE with 0x0008 in the SPI parameter RAM. 


Write RFCR and TFCR with 0x10 for normal operation. 

Execute the INIT RX AND TX PARAMETERS command by writing 0x0051 to CPCR. 
Write 0x0001 to SDCR. | 

Set MRBLR = 0x0010 for 16 bytes, the maximum number of bytes per buffer. 


Initialize the RxBD. Assume the Rx buffer is at Ox0000_1000 in main memory. 
Write 0xB000 to RxBD[Status and Control], Ox0000 to RxBD[Data Length] 
(optional), and 0x0000_1000 to RxBD[Buffer Pointer]. 


8. Initialize the TxBD. Assume the Tx buffer is at OxOO000_2000 in main memory and 
contains five 8-bit characters. Write 0xB800 to TxBD[Status and Control], 0xO005 
to TxBD[Data Length], and 0x0000_2000 to TxBD[Buffer Pointer]. 


9. Write OxFF to SPIE to clear any previous events. 
10. Write 0x37 to SPIM to enable all SPI interrupts. 


11. Write 0x0000_0020 to CIMR (that is, set CIMR[SPI]) to allow the SPI to generate 
a system interrupt. The CICR should also be initialized. 


12.Set SPMODE to 0x0170 to enable normal operation (not loopback), slave mode, SPI 
enabled, and 8-bit characters. Baud-rate generator speed is ignored in slave mode. 


13.Set SPCOM[STR] to enable the SPI to be ready once the master begins the transfer. 





Note that if the master sends 3 bytes and negates SPISEL, the RxBD is closed but the TxBD 
remains open. If the master sends 5 or more bytes, the TxBD is closed after the fifth byte. 
If the master sends 16 bytes and negates SPISEL, the RxBD is closed without triggering a 
busy error (SPIE[BSY}). If the master sends more than 16 bytes, the RxBD is closed (full) 
and an SPIE[BSY] event occurs after the 17th byte is received. 
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31.10 Handling Interrupts in the SPI 


The following sequence should be followed to handle interrupts in the SPI: 


1. Once an interrupt occurs, read SPIE to determine the interrupt source. Normally, 
SPIE bits should be cleared at this time. 


2. Process the TxBD to reuse it and the RxBD to extract the data from it. To transmit 
another buffer, simply set TxBD[R], RxBD[E], and SPCOM[STR]. 


3. Clear the interrupt by writing a one to CISR[SPI]. 


4. Execute an rfi instruction. 
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Universal Serial Bus Controller 


The universal serial bus (USB) is an industry-standard extension to the PC architecture. The 
USB controller on the MPC850 supports data exchange between a PC host and a wide 
range of simultaneously accessible peripherals. Attached peripherals share USB bandwidth 
through a host-scheduled, token-based protocol. The USB physical interconnect is a tiered 
star topology. A hub is the center of each star. Each wire segment is a point-to-point 
connection between the host and a hub or function, or a hub connected to another hub or 
function. A USB system has only one host. The USB transfers signal and power over a four- 
wire cable. The signalling occurs over two wires and point-to-point segments. The USB 
full-speed signalling bit rate is 12 Mbps. A limited-capability low-speed signalling mode is 
also defined at 1.5 Mbps. 


The USB controller consists of a transmitter module, receiver module, and two protocol 
state machines. The protocol state machines control the receiver and transmitter modules. 
One state machine implements the function state diagram and the other implements the host 
state diagram. The USB controller can implement a USB function endpoint, a USB host, or 
both for testing purposes (loop-back diagnostics). 


As shown in Figure 32-1, the USB transmitter has four independent 16-byte FIFOs, one for 
each of the four supported endpoints. The USB receiver has one 16-byte FIFO. 


For USB implementation, the USB specification is a recommended supplement to this 
manual. It can be downloaded from http://www.usb.org. 
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Peripheral Bus U-bus 
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USB Function Endpoint 
and Host State Machine 
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Port Configuration 
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Transmitter 


External Transceiver 


Figure 32-1. USB Controller Block Diagram 


32.1 Features 
The following list summarizes USB slave mode features: 


¢ Four independent endpoints support control, bulk, interrupt and isochronous data 


transfers 
e CRC16/CRCS generation and checking 
| 32 | ¢ NRZI encoding/decoding with bit stuffing 


¢ 12- or 1.5-Mbps data rate 
¢ Flexible data buffers with multiple buffers per frame 
e Automatic retransmission upon transmit error 


The following list summarizes the USB host controller features: 


e Supports control, bulk, interrupt, and isochronous data transfers 
¢ CRC16 generation and checking 
e NRZI encoding/decoding with bit stuffing 
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e 12-Mbps data rate 
e Flexible data buffers with multiple buffers per frame 
e Supports local loopback mode for diagnostics 


32.2 Host Controller Limitations 


The MPC850 USB host controller supports only full-speed (12 Mbps) USB devices. (The 
transmitter does not support preamble generation for low-speed transmissions.) The 
following tasks, however, are not supported by the hardware and must be implemented in 
software: 


e CRC5 generation for token. (Since CRCS is calculated on 11 bits, this should not 
impose a large core overhead.) 

e Retransmission after an error and error recovery. 

e Generation and transmission of SOF token every | ms. 

e Scheduling the various transfers within and between frames. 


Because the MPC850 USB host controller does not integrate the root hub, an external hub 
is required when more than one device is connected to the host. | 


Also note that the host controller programming model is similar to the function endpoint 
programming model but does not conform to the Open Host Controller Interface (OHCI) 
or Universal Host Controller Interface (UHCI) standards, in which software drivers are 
hardware-independent. 


32.3 USB Controller Signal Functions and Clocking 


As shown in Figure 32-2, the USB controller interfaces to the USB through a differential 
line driver and receiver. The OE signal enables the line driver when the USB controller 
transmits on the bus. 
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USB 
MPC 850 Transceiver 





USBTXP 
USBTXN 


Figure 32-2. USB Interface 


The reference clock for the USB controller (USBCLK) is used by the DPLL circuitry to 
recover the bit rate clock. The source for USBCLK 1s selected in SICR[RICS]; see 
Section 20.2.4.3, “SI Clock Route Register (SICR). The MPC850 can run at different 
frequencies, but the USB reference clock must be four times the USB bit rate. Thus, 
USBCLK must be 48 MHz for a 12-Mbps full-speed transfer or 6 MHz for a 1.5-Mbps low- 
speed transfer. 


Table 32-1 describes the six I/O signals associated with the USB port. Some transceivers 
may need additional control signals, such as speed select and low-power control, which can 
be supported by general-purpose output signals. 


Table 32-1. USB Pin Functions 


Outputs from the USB transmitter, inputs to the differential driver. 
Result 
Single-ended zero 
Logic “O” 
Logic “1” 
n/a 


Output enable. Enables the transceiver to send data on the bus. 


Receive data. Input to the USB receiver from the differential line receiver. 


Gated version of D+ and D-. Used to detect single-ended zero, and interconnect speed. 
Result 
Single-ended zero 
Full speed 
Low speed 
n/a 
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32.4 Sending and Receiving 


After reset, the USB controller is addressable at the USB default address (0x00). The host 
assigns a unique address (other than 0x00) to the controller during enumeration. Software 
should program the USB slave address register (USADR) with the assigned address. 


Each of the four independent endpoints can be configured to support either control, 
interrupt, bulk, or isochronous transfers by programming the USB endpoint configuration 
registers, (USEPn). 


Note that the USB system software uses endpoint 0 as a control pipe, so it must be 
configured for control transfer mode (USEPO[TM] = 0b00). Additional control pipes can 
be provided by other endpoints. 


Figure 32-3 shows the logical flow of USB controller operation. 





Unenumerated 


Enumeration 
Process 






Receive 





Figure 32-3. USB Controller Operation Flow 


Once enabled, the USB controller looks for valid token packets (see Table 32-2). Invalid 
tokens, such as PID check fails, CRC check fails, or when the packet length is not 3 bytes, 
are ignored. 
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Table 32-2. USB Tokens 


SETUP 





32-6 






























Reception begins when an OUT token is received. The USB controller fetches the next BD associated 
with the endpoint; if the BD is empty, the controller starts sending the incoming packet to the buffer. After 
the buffer is full, the USB controller clears RxBD[E] and generates an interrupt if RxBD[I] = 1. If the 
incoming packet is larger than the buffer, the USB controller fetches the next BD, and, if it is empty, sends 
the rest of the packet to its buffer. The entire packet, including the DATAO/DATA1 PID, are written to the 
receive buffers. Software must check data packet synchronization by monitoring the DATAO/DATA1 PID 
sequence toggle. 

If the packet reception has no CRC or bit stuff errors, the USB receiver sends the handshake selected in 
the endpoint configuration register USEPn[RHS] (see table below) to the host. If an error occurs, no 
handshake packet is returned and error status bits are set in the last RxBD associated with this packet. 







USB Out/In Token Reception 


USEPn[RHS], 
Data Packet Corrupted | USEPn[THS] Handshake Sent To Host 


es |e | 
a 
ee 
i 
Te 






10 (NAK) 
11 (STALL) STALL 


To guarantee a transfer, the control software must preload the endpoint FIFO with a data packet before 
receiving an IN token. Software should set up the endpoint TxBD table and set USCOM[STR]. The USB 
controller fills the transmit FIFO and waits for the IN token. Once it is received, transmission begins. 





If data is not ready in the transmit FIFO or if USEPn[THS] was set to respond with NAK, a NAK 
handshake is returned. If USEPn[THS] was set to respond with STALL, a STALL handshake is returned. 
When the end of the last buffer is reached (TxBD[L] is set), the CRC is appended. After the frame is sent, 
the USB controller waits for a handshake packet depending on the endpoint configuration USEPn[THS] 
(see table above). If the host fails to acknowledge the packet, the timeout status bit TxBD[TO] is set. 
Software must set the proper DATAO/DATA1 PID in the transmitted packet. 


The format of setup transactions is similar to OUT, but uses a SETUP rather than an OUT PID. A SETUP 
token is recognized only by a control endpoint. When a SETUP token is received, setup reception begins. | 
The USB controller fetches the next BD associated with the endpoint; if it is empty, the controller starts 
transferring the incoming packet to the buffer. When the buffer is full, the USB controller clears RxBD[E] 
and generates an interrupt if RxBD[I] = 1. If the incoming packet is larger than the buffer, the USB 
controller fetches the next BD and, if it is empty, continues transferring the rest of the packet to this buffer. 
The entire data packet including the DATAO PID is written to the receive buffers. If the packet was received 
without CRC or bit stuff errors, an ACK handshake is sent to the host. If an error occurs, no handshake 
packet is returned and error status bits are set in the last RxBD associated with this packet. 


When an SOF packet is received, the USB controller issues a SOF maskable interrupt and the frame 
number entry in the parameter RAM is updated. 


The PRE token signals the hub that a low-speed transaction is about to occur. The PRE token is read only 
by the hub. The USB controller ignores the PRE token function in slave mode. In host mode, the USB 
controller cannot generate a PRE token. 





MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part V. The Communications Processor Module 


32.5 USB Parameter RAM 


The USB controller parameter RAM area, shown in Table 32-3, begins at the USB base 
address. Notice that it is similar to the SCC general-purpose parameter RAM. The user 
must initialize certain parameter RAM values before the USB controller is enabled. Other 
values are initialized by the CP. Once initialized, the parameter RAM values usually do not 
need to be accessed; they should only be modified when no USB activity is in progress. 


Table 32-3. USB Parameter RAM Memory Map 


Gd 
EPOPTR | 16 bits | Endpoint pointer registers 0-3. The endpoint parameter block pointers are index 


pointers to each endpoint’s parameter block. Parameter blocks can be allocated to 
} 0x02 | EPIPTR | 16 bits | any address divisible by 32 in the dual-port RAM. See Figure 32-4. The map of the 


| 0x04 | EP2PTR | 46 bits | CMdPoint parameter block is shown in Table 32-4 
















| 0x08 | RSTATE | 32 bits | Rx internal state. Reserved for CP use only. 


| Ox0C RPTR* | 32 bits | Rx internal data pointer. Updated by the SDMA channels to show the next address in 
2 the buffer to be accessed. 
| 0x10 | FRAME_N| 16 bits | Frame number. See Figure 32-5. 
0x12 | RBCNT? | 16 bits | Rx internal byte count. A down-count value that is initialized with the MRBLR value 
and decremented with every byte written by the SDMA channels. 
RTEMP Rx temp. Reserved for CP use only. 


' Offset from USB base. USB base = IMMR + 0x3C00 
2 These parameters need not be accessed in normal operation but may be helpful for debugging. 









The format of the endpoint pointer registers (EPnPTR) is shown in Figure 32-4. 











0000_0000 


USB base + 0x00 (EPOPTR), 0x02 (EP1PTR), 0x04 (EP2PTR), 0x06 (EP3PTR) 
Figure 32-4. Endpoint Pointer Registers (EPnPTR) 





The endpoint parameter block pointers are indexes to an endpoint’s parameter block. The 
parameter block can be allocated to any address divisible by 32 in the dual-port RAM. The 
map of the endpoint parameter block is shown in Table 32-4. 
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Table 32-4. Endpoint Parameter Block. 


oe [wom] 
} 0x00 RBASE RxBD/TxBD base addresses. Define the starting location in dual-port RAM for the USB | 


—j controller's TxBDs and RxBDs. This provides flexibility in how BDs are partitioned. 
0x02 | TBASE | 16 bits Setting W in the last BD in each list determines how many BDs to allocate for the 
- | controller’s send and receive sides. These entries must be initialized before the 
controller is enabled. Overlapping USB BD tables with another serial controller’s BDs 
causes erratic operation. RBASE and TBASE values should be divisible by 8. 


| 0x04 | RFCR | Bbits | Rx/Tx function code. Controls the value to appear on AT[1—3] when the associated 
| 0x05 TFCR Fe bits | SDMA channel accesses memory and the byte-ordering convention. See Figure 32-6. 


MRBLR | 16 bits | Maximum receive buffer length. Defines the maximum number of bytes the MPC850 si} 
writes to the USB receive buffer before moving to the next buffer. MRBLR must be | 
divisible by 4. The MPC850 can write fewer bytes to the buffer than the MRBLR value if 

|a condition such as an error or end-of-packet occurs, but it never exceeds MRBLR. 
Therefore, user-supplied buffers should never be smaller than MRBLR. 
Transmit buffers for the USB controller are not affected by the MRBLR value. Transmit 
buffer lengths can vary individually, as needed. The number of bytes to be sent is 
chosen by programming TxBD[Data Length]. 


0x08 | RBPTR | 16 bits | RxBD pointer. Points to the next BD the receiver will transfer data to when it is in an idle | 
| state or to the current BD while processing a frame. Software should initialize RBPTR 
after reset. When the end of the BD table is reached, the CP initializes this pointer to the 
value programmed in RBASE. Although the user does not need to write RBPTR in most 
applications (except initialization), it can be changed when the receiver is disabled or 
when no receive buffer is being used. 


OX0A | TBPTR | 16 bits | TxBD pointer. Points to the next BD that the transmitter will transfer data from when it is 
in an idle state or to the current BD during frame transmission. TBPTR should be | 
initialized by the software after reset. When the end of BD table is reached, the CP 
initializes this pointer to the value programmed in the TBASEn entry. Although the user 
never needs to write TBPTR, in most applications (except initialization), it can be 
changed when the transmitter is disabled or when no transmit buffer is being used. 


OXOC | TSTATE? | 32 bits | Tx internal state. Reserved for CP use only. Should be cleared before enabling the USB | 
controller. 


Tx internal data pointer. Updated by the SDMA channels to show the next address in 
the buffer to be accessed. 
0x14 | TCRC? Tx temp CRC. Reserved for CP use only. | 
0x16 | TBCNT? | 16 bits | Tx internal byte count. A down-count value that is initialized with the TxBD data length 
and decremented with every byte read by the SDMA channels. 
' Offset from endpoint parameter block base. 
2 These parameters need not be accessed in normal operation but may be helpful for debugging. 





The USB controller updates the frame number when an SOF token is received. The entry, 
shown in Figure 32-5, contains 11 bits representing the frame number and a valid bit, which 
is set if the SOF token is received without error. An SOF interrupt is issued when this entry 
is updated. 
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eset 0000_0000 
de it : USB base + 0x10 


Figure 32-5. Frame Number (FRAME_N) 





RFCR and TFCR, shown in Figure 32-6, control the value to appear on the AT[1—3] signals 
when the associated SDMA channel accesses memory and the byte-ordering convention. 





Figure 32-6. Transmit/Receive Function Code Registers (TFCR/RFCR) 
Table 32-5 describes TFCR/RFCR fields. 
Table 32-5. TFCR/RFCR Field Descriptions 


a 
Cae Reserved, should be cleared. 


Byte ordering. Set BO to select the required byte ordering for the buffer. If BO is changed on-the-fly, it 
takes effect at the beginning of the next frame (Ethernet, HDLC, and transparent) or at the beginning of 
the next BD. See Appendix A, “Byte Ordering.” 

00 Reserved 


01 PowerPC little-endian. 
1x Big-endian or true little-endian. 





7 AT[1-3] Address type 1-3. Contains the function code used during this SDMA channel’s memory accesses. 
AT[O] is driven with a one to identify this SDMA channel access as a DMA-type access. 


32.6 USB Registers 


The following sections describe registers used in operating the USB controller. 


32.6.1 USB Mode Register (USMOD) 
The USB mode (USMOD) register controls the USB controller operation mode. 


0000_0000 
R/W 


2 OxA00 


Figure 32-7. USB Mode Register (USMOD) 
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Table 32-6 describes USMOD fields. 
Table 32-6. USMOD Field Descriptions 


Cs 
LSS 


if Low-speed signaling. Selects the signaling speed. The actual bit rate depends on the USB clock 


source. 
RESUME | Generate resume condition. When set, this bit generates a resume condition on the USB. This bit 











1 Low-speed (1.5 Mbps) signaling. For a point-to-point connection with a low-speed device or for 
local loopback testing. 






0 Full-speed (12 Mbps) signaling. Normal operation. 
should be used if the function wants to exit the suspend state. 








Test mode. 
0 Normal operation. 

1 Local loopback mode. In this mode, if the HOST bit is set, endpoint 0 operates as host and 
endpoints 1-3 can be used as function endpoints. 








Host mode. 
0 The USB controller implements a USB function. 
1 The USB controller implements a USB host. 








| Enable USB. 
0 USB is disabled. The USB is in a reset state and consumes minimal power. 
1 USB is enabled. Do not modify other USMOD bits while EN is set. 





32.6.2 USB Slave Address Register (USADR) 
The USB address (USADR) register holds the address for this USB port. 


SAD 


0000_0000 
R/W 





Figure 32-8. USB Slave Address Register (USADR) 


Table 32-7 describes the USADR fields. 
Table 32-7. USADR Field Descriptions 


a 
lo f= Reserved, should be cleared. 
Slave address 0-6. Holds the slave address for the USB port. 
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32.6.3 USB Endpoint Configuration Registers 0-3 (USEPn) 
There are four USB endpoint configuration (USEPn) registers; see Figure 32-9. 


a ee cd 


) 0000_0000_0000_0000 
0xA04 (USEPO);0xA06 (USEP1);0xA08 (USEP2);0xA0A (USEP3) 


Figure 32-9. USB Endpoint Registers 0-3 (USEPn) 





Table 32-8 describes the USEPn fields. 
Table 32-8. USEPn Field Descriptions 


Endpoint number. Defines the supported endpoint number. 
Reserved, should be cleared. 


Transfer mode 
00 Control 

01 Interrupt 

10 Bulk 

11 Isochronous 


These bits are reserved and should be cleared. 


Enable multiframe. Allows loading of the next transmit packet into the FIFO before the previous packet 
finishes transmitting. Should be cleared unless the endpoint is configured for ISO transfer mode. 

0 The transmit FIFO may hold only one packet. 

1 The transmit FIFO may hold more than one packet. 
































Retransmit enable. Should be cleared for endpoints configured for ISO transfer mode. 
0 No retransmission. 

1 Enable automatic frame retransmission. Frame is retransmitted if a transmit error occurs (time-out). 
Note: May be set only if the transmit packet is contained in a single buffer. Otherwise, retransmission 
should be handled by software intervention. 





Transmit handshake 

00 Normal handshake. 

| 01 Ignore IN token. 

10 Force NAK handshake. Not allowed for control endpoint. 
11 Force STALL handshake. Not allowed for control endpoint. 







Receive handshake 
00 Normal handshake. 

| 01 Ignore OUT token. 

10 Force NAK handshake. Not allowed for control endpoint. 
111 Force STALL handshake. Not allowed for control endpoint. 
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32.6.4 USB Command Register (USCOM) 


The USB command (USCOM) register, shown in Figure 32-10, is used to start USB 
transmit operation in slave mode. 


0000_0000 








Figure 32-10. USB Command Register (USCOM) 


Table 32-9 describes USCOM fields. 
Table 32-9. USCOM Field Descriptions 


Ce 


Pp Start FIFO fill. Setting STR causes the USB controller to start filling the corresponding endpoint 


transmit FIFO with data. Transmission begins when the IN token for this endpoint is received. STR is 
a FLUSH | Flush FIFO. Setting FLUSH causes the USB controller to flush the corresponding endpoint transmit 














always read as a Zero. 
FIFO. Before flushing the FIFO, issue STOP TX ENDPOINT. After flushing the FIFO, issue RESTART TX 
ENDPOINT; see Section 32.8, “USB CP Commands.” FLUSH is always read as a zero. 


25}— | Reserved, should be cleared. | 
je-7 {EP Endpoint number. Selects the corresponding endpoint. 


32.6.5 USB Event Register (USBER)/Mask Register (USBMR) 


The USB event register (USBER), shown in Figure 32-11, is used to generate interrupt 
events and report events recognized by the USB controller. When an event is recognized, 
the USB sets the corresponding USBER bit. Interrupts generated by USBER may be 
masked in the USB mask register (USBMR). USBER bits are cleared by writing ones; 
writing zeros has no effect. All unmasked bits must be cleared before the CP will clear the 
internal interrupt request. 







The USBMR has the same bit format as the USBER; see Figure 32-11. Setting a USBMR 
bit enables and clearing a bit masks the corresponding interrupt in the USBER. 


0000.00 RESET | IDLE | TXE3 | TXE2 | TXE1 | TXEO 


0000_0000_0000_0000 © 
RW 
0xA10 (USBER); 0xA14 (USBMR); 


Figure 32-11. USB Event Register (USBER)/Mask Register (USBMR) 
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Table 32-10 describes the USBER/USBMR fields. 
Table 32-10. USBER/USBMR Field Descriptions 


foses it 
= fires areiesonedandeboudbeceaes 
[RESET [Rest inion ett ain athe USB eet cenon was eer 
time suspend status is reflected in the USB status register (USBS). 
8-11 Tx error. Indicates that an error occurred during transmission for endpoint n (packet not acknowledged 


or underrun). 
13 |BSY Busy condition. Indicates that received data has been discarded due to a lack of buffers. Set after the 
first character is received for which there is no receive buffer available. 


114 TXB Tx buffer. Indicates that a buffer has been sent. Set once the transmit data of the last character in the 
buffer was written to the transmit FIFO. 

14 RXB Rx buffer. Indicates that a buffer has been received. Set after the last character has been written to the 
receive buffer and the RxBD is closed. 


























Start of frame. Indicates that a start of frame packet was received. The packet is stored in the 
FRAME_N parameter RAM entry; see Section 32.5, “USB Parameter RAM.” 








32.6.6 USB Status Register (USBS) 


The USB status (USBS) register, shown in Figure 32-12, monitors the real-time status of 
the USB lines. 










a aT Ha 


Figure 32-12. USB Status Register (USBS) 





Table 32-11. USBS Field Descriptions 


Table 32-11 describes the USBS fields. 
jeits|wame|eseriptiom 

jo-6 |— | Reserved and should be cleared. 

an IDLE Idle status. Set when an idle condition is detected on the USB lines. Cleared when the bus is not idle. 
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32.7 USB Buffer Descriptor Tables 


Data associated with the USB controller is stored in buffers, which are referenced by BDs 
organized in BD tables in the dual-port RAM. These tables have the same basic 
configuration as those used by the SCCs and SMCs. There are four separate transmit BD 
tables (one for each endpoint) and there are four separate receive BD tables (one for each 
endpoint). See Figure 32-13. 


The BD table allows users to define separate buffers for transmission and reception. Each 
table forms a circular queue. The CP confirms reception and transmission or indicates error 
conditions using status and control fields in the BDs to inform the core that the buffers have 
been serviced. 


The actual buffers may reside in either external memory or internal memory. Data buffers 
may reside in any unused parameter RAM area. 
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Dual-port RAM Tx Buffer Descriptors External Memory 








Tx Data Buffer 


Tx Data Buffer 





Rx Buffer Descriptors 


eRe 








Rx Data Buffer 


EPO RxBD 
Table Pointer 
EPO TxBD 
Table Pointer 









Rx Data Buffer 
EP3 RxBD 


Table Pointer 
EP3 TxBD 


Table Pointer 
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32.7.1 USB Receive Buffer Descriptor (RxBD) 


The CP reports information about each buffer of received data using RxBDs. The CP closes 
the current buffer, generates a maskable interrupt, and starts receiving data in the next buffer 
when the current buffer is full. Additionally, it closes the buffer on the following conditions: 


e End of packet was detected. 


e Overrun error occurred. 
e Bit stuff violation detected. 


Figure 32-14 shows the USB RxBD structure. The first halfword of the RxBD contains 
status and control bits. The user prepares these bits before starting reception; the CP 
updates the status bits after the buffer has been closed. (Note that the user is responsible for 
clearing status bits.) The second halfword contains the data length, in bytes, that was 
received. The third and fourth halfwords contain the pointer to the receive buffer. 


pEioiwiiteje] = | ap | =| no] as]en| ov] — | 


Data Length 


Rx Buffer Pointer 





Figure 32-14. USB Receive Buffer Descriptor (RxBD) 
Table 32-12 describes RxBD status and control fields. 
Table 32-12. RxBD Status and Control Field Descriptions 


Empty. Should be written by the core before enabling the USB. 

0 The buffer is full or reception was aborted due to an error. The core can read or write any fields of 
this RxBD. The CP will not use this BD again while the E bit is zero. 

1 The buffer is empty or reception is in progress. This RxBD and its associated buffer are owned by 
the CP. Once E is set, the core should not write any fields of this RxBD. 


Reserved, should be cleared. 


Wrap (final BD in table). This bit should be written by the core before enabling the USB. 

0 This is not the last buffer descriptor in the RxBD table. 

1 This is the last buffer descriptor in the RxBD table. After this buffer has been used, the CP will 
receive incoming data into the first buffer descriptor in the table (the buffer descriptor pointed to by 
RBASE). The number of RxBDs in this table is programmable and is determined only by the W bit 
and the overall space constraints of the dual-port RAM. 


Interrupt. This bit should be written by the core before enabling the USB. 

0 No interrupt is generated after this buffer has been filled. 

1 USBER[RXB] is be set when this buffer has been completely filled by the CP, indicating the need for 
the core to process the buffer. The RXB bit can cause an interrupt if it is enabled. 
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Table 32-12. RxBD Status and Control Field Descriptions (Continued) 


[ane [aoe] cn 
4 L Last. Set by the USB controller when the buffer is closed due to detection of end-of-packet condition 
on the bus, or as a result of error. This bit is written by the USB controller after the received data has 
5 F 
0 This buffer does not contain the first byte of the message. 
1 This buffer contains the last byte of the message. 
01 This buffer contains DATA1 packet. 
by eight was received. Written by the USB controller after received data is placed in the buffer. 
13 


been placed into the associated data buffer. 
jer |- | Reserved, should be cleared. 
10 This buffer contains SETUP packet. 
CR 















First. Set by the USB controller when the buffer contains the first byte of a packet. Written by the USB 
controller after received data is placed into the associated buffer. 




















0 This buffer does not contain the last character of the message. 
1 This buffer contains the last character of the message. 
Packet ID. Set by the USB controller to indicate the type of the packet. Valid only if F is set. These bits 
are written by the USB controller after the received data is placed into the buffer. 
11 Reserved 
Ho |= | Reserved, should be cleared. 


00 This buffer contains DATAO packet. 
7 Rx nonoctet-aligned packet. Indicates that a packet containing a number of bits not exactly divisible 
















Frame aborted. Indicates that a bit stuff error occurred during reception. This bit is written by the USB 
controller after the received data has been placed into the buffer. 







CRC error. Indicates that the frame contains a CRC error. Received CRC bytes are always written to 
the receive buffer. Written by the USB controller after received data is placed in the buffer. 


14 OV Overrun. Indicates that a receiver overrun occurred during reception. Written by the USB controller 
after received data is placed in the buffer. 
15 |= | This bit is reserved and should be cleared. 


Data length represents the number of octets that the CP has written into this BD’s buffer. It 
is written once by the CP as the BD is closed. 





Note that the memory allocated for a buffer should be no smaller than MRBLR, plus two 
bytes for the CRC if the USB source device does not strip the CRC bytes before sending. 


The receive buffer pointer always points to the first location of the associated buffer. The 
pointer must be divisible by 4. The buffer may reside in either internal or external memory. 


32.7.2 USB Transmit Buffer Descriptor (TxBD) 


Data to be transmitted with the USB is presented to the CP using buffers referenced by 
TxBDs in the TxBD table. Figure 32-15 shows the TxBD structure. 
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Tx Buffer Pointer - 





Figure 32-15. USB Transmit Buffer Descriptor (TxBD) 


The first halfword of a TxBD contains status and control bits. The user prepares these bits 
before starting transmission; the CP updates the status bits after the buffer has been closed. 
(Note that the user is responsible for cae status vee Table 32-13 describes TxBD 
status and control fields. 


Table 32-13. TxBD Status and Control Field Descriptions 


Pee 


Ready. Prepare this bit before transmitting data. 

O The buffer is not ready for transmission. The user can manipulate this BD or its buffer. The CP 
clears R after the buffer is sent or after an error is encountered. 

1 The user-prepared buffer has not been sent or is being transmitted. This BD cannot be apaaied 
while R = 1. 


Reserved, should be cleared. . 


Wrap (Last BD in TxBD table). Prepare W before transmitting data. © 

O Not the last BD in the table. 

1 Last BD in the table. After this buffer has been used, the CP receives incoming data into the first — 
BD in the table (the BD pointed to by TBASEx). The number of TxBDs in this table i is programmable 
and is determined only by the W bit and the overall space constraints of the dual- -port RAM. | 


Interrupt. Prepare this bit before transmitting data. 

0 No interrupt is generated after this buffer has been serviced. 

1 USBER[TXB] or USBER[TXE] is set when this buffer is serviced. TXB and TXE can cause 
interrupts if they are enabled. 


Last. Prepare this bit before transmitting data. 
O This buffer does not contain the last character of the message. 
1 This buffer contains the last character of the message. 


Transmit CRC. Valid only when the L bit is set; otherwise it is ignored. Prepare TC before sending 

data. 

0 Transmit end-of-packet after the last data byte. This setting can be used for iauting purposes to 
send a bad CRC after the data. | 

1 Transmit the CRC sequence after the last data byte. 


Transmit confirmation. Valid only when the L bit is set; otherwise it is ignored. 

0 Continue to load the transmit FIFO with the next packet. No nandshiake or peeponee is expected 
from the function for this packet. 

1 Wait for handshake or response from the function before starting the next packet, or this is the last 
packet. 

Do not clear CNF for a token that is followed by a data packet if the next packet's BD is not ready. 


Reserved, should be cleared. | 


Packet ID. Valid for the first BD of a packet. Otherwise ignored. Prepare PID before sending data. 
OX Do not append PID to the data. 

10 Transmit DATAO PID before sending the data. 

11 Transmit DATA1 PID before sending the data. 
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Table 32-13. TxBD Status and Controi Fieid pesctipiiens ( KConnnved) 


ee 
Ho |= Reserved, should be cleared. 


NAK_ | NAK received. Indicates that the endpoint has responded with a NAK handshake, The packet was 








received error-free; however, the endpoint could not accept it. The USB controller writes TxBD[NAK] 
after it finishes sending the buffer. 


needs attention through the control pipe. The USB controller writes TxBD[STAL] after it finishes 


STAL | STALL received. Indicates that the endpoint has responded with a STALL handshake. The endpoint 
sending the buffer. 


TO Time out. Indicates that the host failed to acknowledge this packet. Written by the USB controller 
after it finishes sending the associated data buffer. 

UN Underrun. Indicates that the USB encountered a transmitter underrun condition while sending the 
buffer. Written by the USB controller after it has ainished transmitting the buffer. 

15 |= | Reserved, should be oealed 


Data length (the second halfword of a TxBD) is the the number of octets the CP should send 
from this BD’s data buffer. It is never modified by the CP. This value should normally be 
greater than zero. 


Tx buffer pointer (the third and fourth halfwords of a TxBD) always points to the first 
location of the buffer in internal or external memory. The pointer may be even or odd. 


32.8 USB CP Commands 


The CP command register (CPCR) can be programmed with commands to transmit data. 
Figure 32-16 shows the USB command format. 









a 


0000_0000_0000_ 0000 





R/W 





0x9CO 
Figure 32-16. USB Command Format of the CPCR 
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MOTOROLA _ Chapter 32. Universal Serial Bus Controller 32-19 








Part V. The Communications Processor Module 


Table 32-14 describes fields in the USB command format. 


Table 32-14. USB Command Format Field Descriptions 


a 


RST CP reset command. Set by the core and cleared by the CP. Executing this command clears 
RST and FLG within two general system clocks. The CPM reset routine takes approximately 
60 clocks, but CPM initialization can start immediately after this command is issued. Use RST 
to reset the registers and parameters for all the channels (SCCs, USB, SMCs, SPI, and I2C) as 
well as the CPM and RISC timer table. RST does not, however, affect the serial interface or 
parallel I/O registers. 


O No reset issued. 
1 Reset issued. 


ce oe Reserved. Should be cleared. 


USBCMD | Contains the USB command. 
01 The STOP TX ENDPOINT command disables the transmission of data on the selected 
endpoint. After issuing the command, flush the corresponding endpoint FIFO. No further 


transmissions will occur until the RESTART TX ENDPOINT command is issued. 
10 The RESTART TX ENDPOINT command enables the transmission of data from the 
corresponding endpoint on the USB. This command is expected by the USB controller after 
a STOP TX ENDPOINT command or after a transmission error (underrun or timeout) occurs. 
All other values are reserved. 


12-13 | ENDPOINT | Endpoint. Logical pipe number. 

00 Endpoint 0 
01 Endpoint 1 
10 Endpoint 2 
11 Endpoint 3 

Line Reserved. Should be cleared. 
Command semaphore flag. Set by the core and cleared by the CP. 
O CP is ready for a new command. 
1 CP is currently processing a command—cleared when the command is done or after reset. 


For the common CP commands available to the USB controller, such as GRACEFUL STOP 
TX, see Table 18-6. 


32.9 USB Controller Errors 


The USB controller reports frame reception and transmission error conditions using the 


BDs and the USB event register (USBER). Transmission errors are shown in Table 32-15. 
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Table 32-15. USB Controller Transmission Errors 


ae 


Transmit If an underrun occurs, the controller forces a bit-stuffing violation, terminates buffer transmission, 
Underrun — {closes the buffer, sets TxBD[UN] and the corresponding USBER[TXEn]. The endpoint resumes 
transmission after the RESTART TX ENDPOINT command is received. 










Transmit packet not acknowledged. If a timeout occurs, the controller tries to retransmit if USEPn[RTE] 
= 1. If RTE = 0 or the second attempt fails, the controller closes the buffer and sets TxBD[TO] and 
USBER[TXEn]. The endpoint resumes transmission after receiving a RESTART TX ENDPOINT command. | 


Tx Data Not | This error occurs if an IN token is received, but the corresponding endpoint’s transmit FIFO is empty, or 
Ready if the target endpoint is configured to NAK or STALL. The controller sets USBER[TXEn]. | 















Table 32-16 describes the USB controller reception errors. 


Table 32-16. USB Controller Reception Errors 


ne 
Overrun If the 16-byte receive FIFO overruns, the previously received byte is overwritten. The controller closes 
Error the buffer and sets both RxBD[OV] and USBER[RXB]. The NAK handshake is sent after the end of the 
received packet if the packet was received error-free. 

A frame was received and discarded due to lack of buffers. The controller sets USBER[BSY]. 

Non Octet- | If this error occurs, the controller writes the received data to the buffer, closes the buffer and sets both 

} RxBD[NO] and USBER[RXB]. 













In isochronous mode (USEPn[TM] = 0b11), the USB controller reports a CRC error, however, there are 
no handshake packets (ACK) and the transfer continues normally when an error occurs. 





CRC Error | When a CRC error occurs, the controller closes the buffer, and sets both RxBD[CR] and USBER[RXB]. 





32.10 USB Controller Programming Example 


The following is an example initialization sequence for the USB controller. It can be used 
to set up four function endpoints (0-3) to fill transmit FIFOs so that data is ready for 
transmission when an IN token is received from the USB. The token can be generated using 
a USB traffic generator. 


1. Write 0x00010000 to the BRGCIregister for division factor | to produce 48 MHz, 
assuming the system clock is 48 MHz. 
Clear PADIR[14, 15] and PAPAR[14, 15] to select USBRXD and USBOE. 


3. Clear PCDIR[10, 11] and PCPAR[10, 11], and set PCSO[10, 11] to select USBRXP 
and USBRXN. 


Set PCDIR[6, 7] and PCPAR[6, 7] to select USBTXP and USBTXN. 


5.. Write (DPRAM+500) to EPOPTR, (DPRAM+520) to EP1PTR, (DPRAM+540) to 
EP2PTR, and (DPRAM+560) to EP3PTR to set up the endpoint pointers. 


6. Write OxBC800004 to DPRAM-+0x20 to set up the TxBD[Status and Control, Data 
Length] fields of endpoint 0 . 
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7. Write DPRAM+200 to DPRAM+0x24 to set up the TxBD[Buffer Pointer] field of 
endpoint 0. 

8. Write OxBCC00004 to DPRAM+0x28 to set up the TxBD[Status and Control, Data 
Length] fields of endpoint 1. | 


9. Write DPRAM+210 to DPRAM+0x2C to set up the TxBD[Buffer ene field of 
endpoint 1. 


10. Write OxBC80004 to DPRAM-+0x30 to set up the TxBD[Status and Control, Data 
Length] fields of endpoint 2. 


11.Write DPRAM +220 to DPRAM+0x34 to set up the TxBD[Butter Pointer] field of 
endpoint 2. 


12. Write OxBCC00004 to DPRAM+0x30 to set up the TxBD[Status and Control, Data 
Length] fields of endpoint 3. 


13.Write DPRAM+30 to DPRAM+0x3C to set up the TxBD[Buffer Pointer] field of 
endpoint 3. 


14.Write OXCAFECAFE to DPRAM+200 to set up the endpoint 0 Tx data pattern. 
15. Write OxFACEFACE to DPRAM+210 to set up the endpoint 1 Tx data pattern. 

16. Write OXBACEBACE to DPRAM+220 to set up the endpoint 2 Tx data pattern. 
17.Write OXCACECACE to DPRAM+230 to set up the endpoint 3 Tx data pattern. 


18. Write 0x20002020 to DPRAM+500 to set up the RBASE and TBASE fields of the 
endpoint 0 parameter RAM. | 


19. Write 0x18180100 to DPRAM+504 to set up the RFCR, TFCR, and MRBLR fields 
of the endpoint 0 parameter RAM. 


20. Write 0x20002020 to DPRAM-+508 to set up the RBPTR and TBPTR oe of the 
endpoint 0 parameter RAM. 


21.Clear the TSTATE field of the endpoint 0 parameter RAM. 


22. Write 0x20082028 to DPRAM+520 to set up the RBASE and TBASE fields of the 
endpoint 1 parameter RAM. 


23.Write 0x18180100 to DPRAM+5724 to set up the RFCR, TFCR, and MRBLR fields 
of the endpoint 1 parameter RAM. 


24. Write 0x20082028 to DPRAM+528 to set up the RBPTR and TBPTR fields of the 
endpoint 1 parameter RAM. 


25.Clear the TSTATE field of the endpoint 1 parameter RAM. 


26. Write 0x20102030 to DPRAM+540 to set up the RBASE and TBASE fields of the 
endpoint 2 parameter RAM. 


27.Write 0x18180100 to DPRAM+544 to set up the RFCR, TFCR, and MRBLR fields 
of the endpoint 2 parameter RAM. 


28. Write 0x20102030 to DPRAM+548 to set up the RBPTR and TBPTR fields of the 
endpoint 2 parameter RAM. 
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29.Clear the TSTATE field of the endpoint 2 parameter RAM. 


30. Write 0x20182038 to DPRAM+560 to set up the RBASE and TBASE fields of the 
endpoint 3 parameter RAM. 


31. Write 0x18180100 to DPRAM+564 to set up the RFCR, TFCR, and MRBLR fields 
of the endpoint 3 parameter RAM. 


32. Write 0x20182038 to DPRAM+568 to set up the RBPTR and TBPTR fields of the 
endpoint 3 parameter RAM. 


33.Clear the TSTATE field of the endpoint 3 parameter RAM. 

34. Write 0x0200 to USEPO for bulk transfer, one packet only, and manual handshake. 
35. Write 0x1200 to USEP1 for bulk transfer, one packet only, and manual handshake. 
36. Write 0x2200 to USEP2 for bulk transfer, one packet only, and manual handshake. 
37. Write 0x3200 to USEP3 for bulk transfer, one packet only, and manual handshake. 


38. Write 0x00 to the USMOD for full-speed 12 Mbps function endpoint mode and 
disable the USB. 


39. Write 0x05 to the USAD for slave address 5. 
40.Clear the USCOM register. 
41.Set USMODJ[EN] to enable the USB controller. 


42. Write 0x80 to the USCOM to start filling the Tx FIFO with endpoint 0 data ready 
for transmission when an IN token is received. 


43. Write 0x81 to the USCOM to start filling the Tx FIFO with endpoint 1 data ready 
for transmission when an IN token is received. 


44, Write 0x82 to the USCOM to start filling the Tx FIFO with endpoint 2 data ready 
for transmission when an IN token is received. 


45. Write 0x83 to the USCOM to start filling the Tx FIFO with endpoint 3 data ready 
for transmission when an IN token is received. 
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Chapter 33 
IC Controller 


The inter-integrated circuit (I?C®) controller lets the MPC850 exchange data with other I?C 
devices, such as microcontrollers, EEPROMs, real-time clock devices, A/D converters, and 
LCD displays. The I?C controller uses a synchronous, multimaster bus that can connect 
several integrated circuits on a board. It uses two signals—serial data (SDA) and serial 
clock (SCL)—to carry information between the integrated circuits connected to it. 


As shown in Figure 33-1, the I?C controller consists of transmit and receive sections, an 
independent baud-rate generator (BRG), and a control unit. The transmit and receive 
sections use the same clock, which is derived from the I?C BRG when in master mode and 
generated externally when in slave mode. Wait states are inserted during a data transfer if 
SCL is held low by a slave device. In the middle of a data transfer, the master I?C controller 
recognizes the need for wait states by monitoring SCL. However, the I?C controller has no 
automatic time-out mechanism if the slave device does not release SCL; therefore, software 
should monitor how long SCL stays low to generate bus timeouts. 


Peripheral Bus U Bus 


Rx Data Register Tx Data Register Mode Register 




































Shift Register Shift Register SDA 
Baud-Rate Generator SCL 





Figure 33-11 I?C Controller Block Diagram 
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The ?C receiver and transmitter are double-buffered, which corresponds to an effective 
two-character FIFO latency. In normal operation, the msb (bit 0) is shifted out first. When 
the I°C is not enabled in the ?C mode register T2MOD[EN] = 0), it consumes little power. 


33.1 I2?C Features 


The following is a list of the I?C controller’s main features: 


¢ Two-signal interface (SDA on PB[27] and SCL on PB[26]) 
e Support for master and slave I?C operation 

e Multiple-master environment support 

e Continuous transfer mode for autoscanning of a peripheral 


e Supports a maximum clock rate of 520 KHz (with a CPM utilization of 25%), 
assuming a 25-MHz system clock. 


e Independent, programmable baud-rate generator 

e Supports 7-bit I’?C addressing 

e Open-drain output signals allow multiple master configuration 
e Local loopback capability for testing 


33.2 I?C Controller Clocking and Signal Functions 


The PC controller can be configured as a master or slave for the serial channel. As a master, 
the controller’s BRG provides the transfer clock. The I?C BRG takes its input from the BRG 
clock (BRGCLK), which is described in Section 14.3, “Clock Signals.” 


SDA and SCL are bidirectional signals connected to a positive supply voltage through an 
external pull-up resistor. When the bus is free, both signals are pulled high. The general I?C 
master/slave configuration is shown in Figure 33-2. 


VpD 


Master Slave 


SCL SCL 
SDA SDA (EEPROM, for example) 


VDD 
Figure 33-2. I@C Master/Slave General Configuration 








When the °C controller is the master, the SCL clock output, taken directly from the °C 

BRG, shifts receive data in and transmit data out through SDA. The transmitter arbitrates 

for the bus during transmission and aborts if it loses arbitration. When the I?C controller is 

a slave, the SCL clock input shifts data in and out through SDA. The SCL frequency can 
range from DC to BRGCLK/48. 
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33.3 I2C Controller Transfers 


To initiate a transfer, the master I?C controller sends a message specifying a read or write 
request to an I’C slave. The first byte of the message consists of a 7-bit slave port address 
and a R/W request bit. Note that because the R/W request follows the slave port address in 
the I°C bus specification, the R/W request bit must be placed in the Isb (bit 7) unless 
operating in reverse data mode; see Section 33.4.1, “I2C Mode Register T2MOD).” 


To write to a slave, the master sends a write request (R/W = 0) along with either the target 
slave’s address or the general call (broadcast) address of all zeros, followed by the data to 
be written. To read from a slave, the master sends a read request (R/W = 1) and the target 
slave’s address. When the target slave acknowledges the read request, the transfer direction 
is reversed, and the master receives the slave’s transmit buffers. If the receiver (master or 
slave) does not acknowledge each byte transfer in the ninth bit frame, the transmitter signals 
a transmission error event (IZER[TXE]). An PC transfer timing diagram is shown in 
Figure 33-3. 


Start Condition Stop Condition 

~ “7 ~ 7 
SCL || 

| | 42345678a:9 1 | 

| | A | | 

| | % | | 
SDA na mae 

L | L _ 


Figure 33-3. IC Transfer Timing 


Select master or slave mode for the controller using the PC command register 
(IZCOM[M/S]). Set the master’s start bit, I2COM[STR], to begin a transfer; setting a 
slave’s IZACOM[STR] activates the slave to wait for a transfer request from a master. 


If a master or slave transmitter’s current TxBD[L] is set, transmission stops once the buffer 
is sent; that is, IACOM[STR] must be set again to reactivate transfers. If TxBD[L] is zero, 
once the current buffer is sent, the controller begins processing the next TxBD without 
waiting for IZCOM[STR] to be set again. 


The following sections further detail the transfer process. 


33.3.1 IC Master Write (Slave Read) 


If the MPC850 is the master, prepare the transmit buffers and BDs before initiating a write. 
Initialize the first transmit data byte with the slave address and write request (R/W = 0). 


If the MPC850 is the slave target of the write, prepare receive buffers and BDs to await the 
master’s request. Figure 33-4 shows the timing for a master write. 
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4ADPr8diH 


S 
0 
A A 
| Cc cf 
SDA | | Device Address |W K}  DataByte =| Kj | 


Note: Data and ACK are repeated n times. 


Figure 33-4. I?C Master Write Timing 


A master write performed by the MPC850 occurs as follows: 


1. Set the master’s IZCOM[STR]. The transfer starts when the SDMA channel loads 
the transmit FIFO with data and the I°C bus is not busy. 


2. The I’?C master generates a start condition—a high-to-low transition on SDA while 
SCL is high—and the transfer clock SCL pulses for each bit shifted out on SDA. If 
the master transmitter detects a multiple-master collision (by sensing a ‘0’ on SDA 
while sending a ‘1”), transmission stops and the channel reverts to slave mode. A 
maskable interrupt is sent to the master’s core so software can try to retransmit later. 


3. The slave acknowledges each byte and writes to its current receive buffer until a new 
start or stop condition is detected. 


4. After sending each byte, the master monitors the acknowledge indication. If the 
slave receiver fails to acknowledge a byte, transmission stops and the master 
generates a stop condition—a low-to-high transition on SDA while SCL is high. 


33.3.2 IC Loopback Testing 


When in master mode, an [°C controller supports loopback operation for master write 
requests. The master I’C controller simply issues a write request directed to its own address 
(programmed in IZADD). The master’s receiver monitors the transmission and reads the 
transmitted data into its receive buffer. Loopback operation requires no special register 
programming. 


33.3.3 I2C Master Read (Slave Write) 


Before initiating a master read with the MPC850, prepare a transmit buffer of size n+1 
bytes, where n is the number of bytes to be read from the slave. The first transmit byte 
should be initialized to the slave address with R/W = 1. The next n transmit bytes are used 
strictly for timing and can be left uninitialized. Configure suitable receive buffers and BDs 
to receive the slave’s transmission. 


If the MPC850 is the slave target of the read, prepare the I?C transmit buffers and BDs and 
activate it by setting IZCOM[STR]. Figure 33-5 shows the timing for a master read. 
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N 
S O 
T S 
A i 6 
R A CoO 
dE C K p 
SDA | | | Device Address |R|K|  — DataByte | | | 


Note: After the nth data byte, the master does not acknowledge the slave. 


Figure 33-5. I?C Master Read Timing 
A master read performed by the MPC850 occurs as follows: 


1. Set the master’s IZCOM[STR] to initiate the read. The transfer starts when the 
SDMA channel loads the transmit FIFO with data and the I?C bus is not busy. 


2. The slave detects a start condition on SDA and SCL. 


3. After the first byte is shifted in, the slave compares the received data to its slave 
address. If the slave is an MPC850, the address is programmed in its I?C address 
register (IZADD). 


— Ifamatch is found and the slave is ready, then the slave acknowledges the request 
and begins sending on the clock pulse after the acknowledge. If the slave is an 
MPC850, it is ready when its transmit FIFO has been loaded by the SDMA 
channel (the transmit buffers and BDs have been prepared and IZCOM[STR] has 
been set). 


— Ifa match is found but the slave is not ready, the read request 1s not 
acknowledged and the transaction is aborted. If the slave is an MPC850, a 
maskable transmission error interrupt is triggered to allow software to prepare 
data for transmission on the next try. 


— If amiusmatch occurs, the slave ignores the message and searches for a new start 
condition. 


4. The master acknowledges each byte sent as long as an overrun does not occur. If the 
master receiver fails to acknowledge a byte, the slave aborts transmission. For a 
slave MPC850, the abort generates a maskable interrupt. A maskable interrupt is 
also issued after a complete buffer is sent or after an error. If an underrun occurs, the 
MPC850 slave sends ones until a stop condition is detected. 





33.3.4 I?C Multi-Master Considerations 


The PC controller supports a multi-master configuration, in which the I?C controller must 
alternate between master and slave modes. The [?C controller supports this by 
implementing I?C master arbitration in hardware. However, due to the nature of the I?C bus 
and the implementation of the I°C controller, certain software considerations must be made. 
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An MPC850 FC controller attempting a master read request could simultaneously be 
targeted for an external master write (slave read). Both operations trigger the controller’s 
I2CER[RXB] event, but only one operation wins the bus arbitration. To determine which 
operation caused the interrupt, software must verify that its transmit operation actually 
completed before assuming that the received data is the result of its read operation. 


Problems could also arise if the MPC850's °C controller master sets up a transmit buffer 
and BD for a write request, but then is the target of a read request from another master. 
Without software precautions, the I’C controller responds to the other master with the 
transmit buffer originally intended for its own write request. To avoid this situation, a 
higher-level handshake protocol must be used. For example, a master, before reading a 
slave, writes the slave with a description of the requested data (which register should be 
read, for example). This operation is typical with many [°C devices. 


33.4 I?C Registers 


The following sections describe the ie registers. 


33.4.1 I?C Mode Register (I2MOD) 


The I7C mode register, shown in Figure 33-6, controls the PC emotes and clock source. 


0000_0000 


Figure 33-6. I“C Mode Register (I2MOD) 
Table 33-1 describes I2MOD bit functions. 





Table 33-1. I2MOD Field Descriptions 


a 
oie! Reserved and should be cleared. 


REVD | Reverse data. Determines the Rx and Tx character bit order. 
O Normal operation. The msb (bit 0) of each character is sent and received first. 


1 Reverse data. The Isb (bit 7) of each character is sent and received first. 
Note: Clearing REVD is strongly recommended to ensure consistent bit ordering across devices. 


General call disable. Determines whether the receiver acknowledges a general call address (all zeros). 
0 General call address is enabled. 
1 General call address is disabled. 


Clock filter. Determines if the I7C input clock SCL is filtered to prevent spikes in a noisy environment. 
0. SCL is not filtered. 
1 SCL is filtered by a digital filter. 
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Table 33-1. I2MOD Field Descriptions (Continued) 


sits | Name Description 
5-6 |PDIV | Predivider. Selects the clock division factor before it is input into the I°C BRG. The clock source for the 
00 BRGCLK/32 






°C BRG is the BRGCLK generated by the SIU. 
01 BRGCLK/16 


10 BRGCLK/8 
11 BRGCLK/4 
Note: To both save power and reduce noise susceptibility, select the PDIV with the largest division 
factor (slowest clock) that still meets performance requirements. 


7 |eEN |Enable 2Coperation. 
0 1°C is disabled. The IC is in a reset state and consumes minimal power. 
11°C is enabled. Do not change other I2MOD bits when EN is set. 
33.4.2 I?C Address Register (I2ADD) 
The I?C address register, shown in Figure 33-7, holds the address for this PC port. 


0000_0000 


R/W 





0x864 
Figure 33-7. I*C Address Register (IZADD) 


Table 33-10 describes I2CADD fields. 





33.4.3 1?C Baud Rate Generator Register (125 





3RG) 


The [°C baud rate generator register, shown in Figure 33-8, sets the divide ratio of the PC 
BRG. 









1414_1111 
R/W 
Ox868 

Figure 33-8. I“C Baud Rate Generator Register (I2BRG) 
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Table 33-3 describes I2BRG fields. 


Table 33-3. I2BRG Field Descriptions : 


emp 


Division ratio O—7. Specifies the divide ratio of the BRG divider in the I?C clock generator. The output of 
the prescaler is divided by 2 * ([DIVO—DIV7] + 3) and the clock has a 50% duty cycle. DIV must be 
programmed to a minimum value of 3 if the digital filter is disabled and 6 if it is enabled. 






33.4.4 IC Event/Mask Registers (I2CER/I2CMR) 


The I’C event register (I2CER) is used to generate interrupts and report events. When an 
event is recognized, the I?C controller sets the corresponding I2CER bit. I2CER bits are 
cleared by writing ones— writing zeros has no effect. Setting a bit in the I?C mask register 


(I2CMR) enables and clearing a bit masks the corresponding interrupt. Unmasked I2CER 
bits must be cleared before the CPM clears internal interrupt requests. Figure 33-9 shows 
both registers. 










Figure 33-9. I“C Event/Mask Registers (I2CER/I2CMR) 


a a 
Ww 






- Table 33-4 describes the I2CER/I2CMR fields. 


Table 33-4. I2CER/I2CMR Field Descriptions 


Reserved and should be cleared : : 














2 


Cine 


.o) 


3 |TXE | Tx error. Set when an error occurs during transmission. 
a= | Reserved and should be cleared. _ 
is |BSY Busy. Set after the first character is received but discarded because no Rx buffer is available. 


ory; #& 






TXB_ | Tx buffer. Set when the Tx data of the last character in the buffer is written to the Tx FIFO. Two character 
times must elapse to guarantee that all data has been sent. 
Rx buffer. Set after the last character is written to the Rx buffer and the RxBD is closed. 


33.4.5 2C Command Register (I2COM) 


The I?C command register, shown in Figure 33-10, is used to start I?C transfers and to select 
master or slave mode. | 
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0000_.0000 





Figure 33-10. ICC Command Register (l2COM) 


Table 33-5 describes I2COM fields. 
Table 33-5. I2COM Field Descriptions 


Start transmit. In master mode, setting STR causes the °C controller to start sending data from the 
°C Tx buffers if they are ready. In slave mode, setting STR when the I?C controller is idle causes it to 
load the Tx data register from the current Tx buffer (if ready) and start sending when it receives an 
address byte that matches the slave address with R/W = 1. STR is always read as a 0. 


Master/slave. Configures the 25 controller to operate as a master or a slave. 
0 I°C is a slave. 
1 IC is a master. 





33.5 I?C Parameter RAM 


The I°C controller parameter RAM area, shown in Table 33-6, is used for the general I?C 
parameters. It is similar to the SCC general-purpose parameter RAM. Certain parameter 
RAM values, such as the maximum receive buffer length (MRBLR), must be initialized by 
the user before the I?C is enabled, while other parameters, used by the CPM, do not need 
initialization. Software usually does not access parameter RAM entries once they are 
initialized; they should be changed only when the [°C is inactive. 


Table 33-6. I°C Parameter RAM Memory Map 


En 


RBASE | Hword| Rx/TxBD table base address. Indicate where the BD tables begin in the dual-port RAM. 


Setting Rx/TxBD[W] in the last BD in each BD table determines how many BDs are 
7 


allocated for the Tx and Rx sections of the I°C. Initialize BBASETT BASE before enabling 
: 


the IFC. Furthermore, do not configure BD tables of the | C to overlap any other active 
ro 














controller's parameter RAM. 
RBASE and TBASE should be divisible by eight. 










Rx/Tx function code. Contains the value to appear on AT[1—3] when the associated 
SDMA channel accesses memory. Also controls the byte-ordering convention for 
transfers. See Figure 33-11 and Table 33-7. 
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Table 33-6. I°-C Parameter RAM Memory Map (Continued) 


elem 


MRBLR_ j Hword | Maximum receive buffer length. Defines the maximum number of bytes the °C receiver 
writes to a receive buffer before moving to the next buffer. The receiver writes fewer 
bytes to the buffer than the MRBLR value if an error or end-of-frame occurs. Receive 
buffers should not be smaller than MRBLR. 

Transmit buffers are unaffected by MRBLR and can vary in length; the number of bytes 
to be sent is specified in TxBD[Data Length]. 

MRBLR is not intended to be changed while the IC is operating. However it can be 
changed in a single bus cycle with one 16-bit move (not two 8-bit bus cycles 
back-to-back). The change takes effect when the CP moves control to the next RxBD. To 
Guarantee the exact RxBD on which the change occurs, change MRBLR only while the 
I“C receiver is disabled. MRBLR should be greater than zero. 


0x08 RSTATE Rx internal state. Reserved for CPM use. 


Ox0C RPTR Word | Rx internal data pointer? is updated by the SDMA channels to show the next address in 
the buffer to be accessed. 


0x10 RBPTR_- | Hword| RxBD pointer. Points to the next descriptor the receiver transfers data to when it is in an 
idle state or to the current descriptor during frame processing for each I2C channel. After 








0x06 

























a reset or when the end of the descriptor table is reached, the CP initializes RBPTR to 
the value in RBASE. Most applications should not write RBPTR, but it can be modified 
when the receiver is disabled or when no receive buffer is used. 


0x12 RCOUNT | Hword | Rx internal byte count is a down-count value that is initialized with the MRBLR value 
and decremented with every byte the SDMA channels write. 

0x14 RTEMP Rx temp. Reserved for CPM use. | . 

TSTATE Tx internal state. Reserved for CPM use. 


0x1C TPTR Word | Tx internal data pointer 7 is updated by the SDMA channels to show the next address in 
the buffer to be accessed. : 


0x20 TBPTR = | Hword} TxBD pointer. Points to the next descriptor that the transmitter transfers data from when 
it is in an idle state or to the current descriptor during frame transmission. After a reset or 
when the end of the descriptor table is reached, the CPM initializes TBPTR to the value 













in TBASE.Most applications should not write TBPTR, but it can be modified when the 
transmitter is disabled or when no transmit buffer is used. 


0x22 TCOUNT | Hword | Tx internal byte count 2 is a down-count value initialized with TxBD[Data Length] and 
decremented with every byte read by the SDMA channels. 







0x24 TTEMP Tx temp. Reserved for CP use. 


| From I“C base. IC base = IMMR + 0x3C80. 
Normally, these parameters need not be accessed. 
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Figure 33-11 shows the RFCR/TFCR bit fields. 


SS eS ey ce 2 ae 


0000_0000 
R/W 





I2C Base + 04 (RFCR)/I2C Base + 05 (TFCR) 


Figure 33-11. I“C Function Code Registers (RFCR/TFCR) 
Table 33-7 describes the RFCR/TFCR bit fields. 
Table 33-7. RFCR/TFCR Field Descriptions 


snows [eon 
jo-2|— Reserved, should be cleared. 


3-4 Byte ordering. Set BO to select the required byte ordering for the buffer. If BO is changed on-the-fly, it 
takes effect at the beginning of the next frame (Ethernet, HDLC, and transparent) or at the beginning 
of the next BD. See Appendix A, “Byte Ordering.” 

| 00 Reserved 
01 PowerPC little-endian. 


1x Big-endian or true little-endian. 
5-7 | AT[1-3] | Address type 1-3. Contains the user-defined function code value used during the SDMA channel 
memory access. ATO is always driven high to identify this channel access as a DMA-type access. 


33.6 120 Commands 


The I7C transmit and receive commands, shown in Table 33-8, are issued to the CPM 
command register (CPCR). 





Table 33-8. I2C Transmit/Receive Commands 


INIT TX Initializes all transmit parameters in the parameter RAM to their reset state. Should be issued only 
PARAMETERS | when the transmitter is disabled. The INIT TX AND RX PARAMETERS command can also be used to reset 
both the Tx and Rx parameters. 





CLOSE RXBD | Forces the I°C controller to close the current Rx BD and use the next BD for subsequently received 
data. If the controller is not receiving data, no action is taken. Use this command to extract data from a 
partially full buffer. 


INIT RX Initializes all receive parameters in the parameter RAM to their reset state. Should be issued only when 
PARAMETERS | the receiver is disabled. The INIT TX AND RX PARAMETERS Command can also be used to reset both the 
Tx and Rx parameters. 


33./ I?C Buffer Descriptor (BD) Tables 


As shown in Figure 33-12, buffer descriptors (BDs) are organized into separate Rx and 
TxBD tables in dual-port RAM. The tables have the same basic configuration as for the 
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SCCs and SMCs and form circular queues that determine the order buffers are transferred. 
The CPM uses BDs to confirm reception and transmission or to indicate error conditions so 
that the core knows buffers have been serviced. The buffers themselves can be placed in 
external memory or in any unused parameter area of the dual-port RAM. 


Dual-Port RAM 
Co 


8 


External Memory 
























TxBD Table 


| Tx Buffer 


ee 







Status and Control 
Data Length 


Buffer Pointer 


~~ 







T 


I?C TxBD Table 


& S a 








RxBD Table 


Status and Control 
Data Length 
Buffer Pointer 


I2C RxBD Table 


ee Sere sf 
Liz 


ee = 
Ee ee a ees 


Pee : 

I2C RxBD Table Pointer 
(RBASE) 
TBASE) 


2c ae Table Pointer 


Figure 33-12. I?C Memory Structure 


















33.7.1 1?C Buffer Descriptors (BDs) 


Receive and transmit buffer descriptors report information about each buffer transferred 
and whether a maskable interrupt should be generated. Each 64-bit BD, shown in 
Figure 33-13 and Figure 33-14, has the following structure: 


33-12 


The half word at offset + 0 contains status and control bits. The CPM updates the 
status bits after the buffer is sent or received. 


The half word at offset + 2 contains the data length (in bytes) that is sent or received. 


— For an RxBD, this is the number of octets the CPM writes into this RxBD’s 
buffer once the descriptor closes. The CPM updates this field after the received 
data is placed into the associated buffer. Memory allocated for this buffer should 
be no smaller than MRBLR. 


— Fora TxBD, this is the number of octets the CPM should transmit from its buffer. 


Normally, this value should be greater than zero. The CPM never modifies this 
field. 


The word at offset + 4 points to the beginning of the buffer. 


— For an RxBD, the pointer must be even and can point to internal or external 
memory. 


— Fora TxBD, the pointer can be even or odd. The buffer can reside in internal or 
external memory. 
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33.7.1.1 l?C Receive Buffer Descriptor (RxBD) 


Using RxBDs, the CPM reports on each buffer received, closes the current buffer, generates 
a maskable interrupt, and starts receiving data in the next buffer when the current one is full. 
It closes the buffer when a stop or start condition is found on the I?C bus or when an overrun 
error occurs. The core should write RxBD bits before the I?C controller is enabled. 






Data Length 
RX Buffer Pointer 


Figure 33-13. I°C Receive Buffer Descriptor (RxBD) 


Table 33-9 describes IC RxBD status and control bits. 


Table 33-9. Ic RxBD Status and Control Bits 


En 


0 The buffer is full or stopped receiving because of an error. The core can examine or write to any 
fields of this RxBD, but the CPM does not use this BD while E = 0. 


1 The buffer is empty or reception is in progress. The CPM owns this RxBD and its buffer. Once E is 
set, the core should not write any fields of this RxBD. 








Wrap (last BD in table). 
0 Not the last BD in the RxBD table. 

1 Last BD in the RxBD table. After this buffer is used, the CPM receives incoming data using the BD 
pointed to by RBASE (top of the table). The number of BDs in this table is determined only by the W 
bit and overall space constraints of the dual-port RAM. 










Interrupt. 
10 No interrupt is generated after this buffer is full. 

1 The I2CER[RXB] is set when the CPM fills this buffer, indicating that the core needs to process the 
buffer. The RXB bit can cause an interrupt if it is enabled. 













Last. The I°C controller sets L. 

0 This buffer does not contain the last character of the message. 

1 This buffer holds the last character of the message. The °C controller sets L after all received data is 
placed into the associated buffer, or because of a stop or start condition or an overrun. 


5-13)— | Reserved and should be cleared. 


fo Overrun. Set when a receiver overrun occurs during reception. The I2C controller updates this bit after 










| the received data is placed into the associated buffer. 


15 |- | Reserved and should be cleared: 


33.7.1.2 IC Transmit Buffer Descriptor (TxBD) 


Transmit data is arranged in buffers referenced by TxBDs in the TxBD table. The first word 
of the TxBD, shown in Figure 33-14, contains status and control bits. 
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Data Length 


Tx Buffer Pointer 





Figure 33-14. I“C Transmit Buffer Descriptor (TxBD) 
Table 33-10 describes I2C TxBD status and control bits. 


Table 33-10. IC TxBD Status and Control Bits 


a 
Ready. 
0 The buffer is not ready to be sent. This BD or its buffer can be modified. The CPM clears R after the 
buffer is sent or an error occurs. 
1 The buffer is ready for transmission or is being sent. The BD cannot be modified once R is set. 
p= Reserved and should be cleared. 


2 Wrap (last BD in TxBD table). 
0 Not the last BD in the table. 
1 Last BD in the table. After this buffer is used, the CPM transmits data using the BD pointed to by 
TBASE (top of the table). The number of BDs in this table is determined only by the W bit and overall 
space constraints of the dual-port RAM. 


Interrupt. 
0 No interrupt is generated after this buffer is serviced. 
1 I2CER[TXB] or l2CER[TXE] is set when the buffer is serviced. If enabled, an interrupt occurs. 


Last. 
| 0 This buffer does not contain the last character of the message. 
| 1 This buffer contains the last character of the message. After sending this buffer, the transmitter 
generates a stop condition and deactivates. (Retrigger I2COM[STR] to initiate a new transmission.) 


Generate start condition. Provides ability to send back-to-back messages on one I2COM[STR] trigger. 
0 Do not send a start condition before the first byte of the buffer. 

1 Send a start condition before the first byte of the buffer. (Used to separate messages.) 

Note: If this BD is the first one in a message when I2COM[STR] is triggered, a start condition is sent 
regardless of the value of TxBD[S]. 


Reserved and should be cleared 


13 NAK_ | No acknowledge. Indicates that the transmission was aborted because the last byte sent was not 
| acknowledged. The I2C controller updates NAK after the buffer is sent. 


Underrun. Indicates that the I27C controller encountered a transmitter underrun condition while sending 
the associated buffer. The I?C controller updates UN after the buffer is sent. 


Collision. Indicates that transmission terminated because the transmitter was lost while arbitrating for 
the bus. The I@C controller updates CL after the buffer is sent. 
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Parallel I/O Ports 


The CPM supports four general-purpose I/O ports—A, B, C, and D. Each signal in the I/O 
ports can be configured as a general-purpose I/O signal or as a signal dedicated to 
supporting communications devices, such as SMCs and SCCs. 


e Port A is shared with the RXD and TXD signals of SCC2 and SMC1, the bank of 
clock signals, and some time-division multiplexed (TDM) signals. 


e Port B is shared with the SCC3 and other functions such as TDM, IDMA, SMC2, 
SPI, and ’C signals. 


¢ Port C is shared with the RTS, CTS, and CD signals of the SCCs as well as some 
TDM signals. However, port C is unique in that its signals can generate interrupts to 
the CPM interrupt controller (CPIC). 


e Port D is for general-pupose signals. 


The read/write port signals can be configured as inputs or outputs with a latch for data 
output. They can be configured to be either general-purpose I/O or dedicated peripheral 
signals. Regardless of the programmed function, the I/O signals’ state can always be read 
from their data registers (PxDAT). 


Ports A and B have signals that can be configured as open-drain. Open-drain signals drive 
a zero voltage, but they three-state when driving a high voltage. Note that none of the port 
signals have internal pull-up resistors. 


To support flexible configuration of the CPM, many dedicated peripheral functions are 
multiplexed onto ports A, B, C, and D. Functions are grouped to maximize the signals’ 
usefulness to the greatest number of MPC850 applications. To understand signal 
assignments described in this chapter, it helps to understand each CPM peripheral. 
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34.1 Features 


The following lists the main features of the parallel I/O ports: 


e Port Ais 10 bits 

e Port B is 14 bits. 

¢ Port C is 12 bits 

e¢ Port D is 13 bits 

e All ports are bidirectional 

e All ports are three-stated at hardware reset 


¢ All ports have alternate on-chip peripheral functions and all signal values can be 
read while the signal is connected to an on-chip peripheral 


e Ports A and B have open-drain capability 
e Port C has 12 interrupt input signals 


34.2 PortA 


Port A signals are configured as follows in the port A pin assignment register (PAPAR): 
¢ General-purpose I/O signal (the corresponding PAPAR[DDzn] = 0) 
e Dedicated on-chip peripheral signal (PAPAR[DDn] = 1) 


PAPAR and the port A data direction register (PADIR) are cleared at reset, thus configuring 
all port A signals as general-purpose input signals. Table shows defaults for port A signal 
options. 


Table 34-1. Port A Pin Assignment 


Pin Function 
PAPAR[DDn] = 0 FArAn Peo Input to On-Chip Peripherals 


(General /O) ' (Default) 

a 

paras 
eas 




























PORT A6 CLK2/TIN32 TOUTI CLK2/TIN3 = GND 
PORT A5 CLK3/TIN2/L1TCLKA2 BRGO2 CLK3/TIN2/L1TCLKA = BRGO2 
PORT A4 CLK4/TIN4? TOUT? CLK4/TIN4 = GND 


: Clearing the corresponding PADIR bit makes the signal an input; setting PADIR makes it an output. 
2 Multi-function peripheral input signals, such as CLK1/TIN1/L1RCLKA, can perform multiple functions 
simultaneously. (That is, a clock supplied at PA7 can be used for both CLK1 and TIN1.) 
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Port A signals selected for general-purpose I/O can be accessed through the port A data 
register (PADAT). Data written to PADAT is stored in an output latch. For port A outputs, 
the latch data is gated onto the signal. When PADAT is read, the signal itself is read. For 
inputs, data written to PADAT is also stored in the output latch but cannot reach the port 
signal, so when PADAT is read, the signal’s state is read. If an input to a peripheral is not 
supplied from a signal, the default value listed in Table is supplied. 


34.2.1 Port A Registers 


Port A has four memory-mapped control registers, described in the following sections. 


34.2.1.1 Port A Open-Drain Register (PAODR) 

The port A open-drain register (PAODR), shown in Figure 34-1, determines which port 
signals with serial channel output capability are configured in a normal or wired-OR 
configuration. Setting the PAODR bits configure the signals for open-drain operation. 





Figure 34-1. Port A Open-Drain Register (PAODR) 


Table 34-2 describes PAODR bits. 
Table 34-2. PAODR Bit Descriptions 


Reserved, always reads as 0. 


Tells how the corresponding port A signal is interpreted. 
0 The signal is actively driven as an output. 
1 The signal is an open-drain driver. Outputs are actively driven low. Otherwise, it is three-stated. 





34.2.1.2 Port A Data Register (PADAT) 


Reading the port A data (PADAT) register returns the value of the signal, regardless of 
whether the signal is an input or output. Comparing written data with the data on the signal 
can detect output conflicts. A write to a PADAT bit is latched; if the bit is configured as an 
output, the value latched for that bit is driven onto its respective signal. PADAT can be read 
or written at any time, is not initialized, and is undefined at reset. 
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ee 
0x956 


Figure 34-2. Port A Data Register (PADAT) 





Table 34-3 describes PADAT bits. 


Table 34-3. PADAT Bit Descriptions 







fmf Ban 
Sn 
4-9, 12-15 Jon | Contains the data on the corresponding signal. 


34.2.1.3 Port A Data Direction Register (PADIR) 





Port A data direction register (PADIR) bits configure port A signals as general-purpose 
inputs or outputs. If a signal is not programmed for general-purpose I/O, PADIR selects the 
peripheral function to be performed. 


| — | — | — | — [ore[prs|ors|or7|prs|ore| — | — 
ftw fr ww} pew] | | Raw | Rw | aw | RA 
0x950 


Figure 34-3. Port A Data Direction Register (PADIR) 














Table 34-4 describes PADIR bits. 
Table 34-4. PADIR Bit Descriptions 


Reserved 


Port A data direction. Configures port A signals as inputs or outputs when bunehoning as 
general-purpose I/O; otherwise, used to select the peripheral function. 

0 Select the signal for general-purpose input, or select peripheral function 0. 

1 Select the signal for general-purpose output, or select peripheral function 1. 
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34.2.1.4 Port A Pin Assignment Register (PAPAR) 


The port A pin assignment register (PAPAR) configures signals as general-purpose I/O or 
dedicated for use with a peripheral. 


bots 605 | o07 bos 





Figure 34-4. Port A Pin Assignment Register (PAPAR) 


Table 34-5 describes PAPAR bits. 
Table 34-5. PAPAR Bit Descriptions 


—3, 


Configures a signal for general-purpose 1/O or for dedicated peripheral function 

0 General-purpose !/O. The peripheral functions of the signal are not used. 

1 Dedicated peripheral function. The signal is used by the internal module. The on-chip peripheral 
function to which it is dedicated can be determined by other bits. 






34.2.2 Port A Configuration Examples 


This section describes the configuration for several PA signals, which are as follows: 


e PA15 can be configured as a general-purpose I/O signal but not as an open-drain 
signal. It can also be USBRXD of the USB. If it is configured as a general-purpose 
I/O signal, the USBRXD input is internally grounded. See Section 34.2.3, “Port A 
Functional Block Diagrams.” 


e PA14 can be configured as a general-purpose I/O signal, either open-drain or not. 
See Section 34.2.3, “Port A Functional Block Diagrams.” 


— If PA14 is configured as a general-purpose I/O signal, the USBTXD output is not 
connected externally. 


— If USBTXD 1s an output on PA14 and PAODR[OD 14] = 1, USBTXD is an 
open-drain output. 
e PA7 can be configured as a general-purpose I/O signal but not an open-drain signal. 


— If PADIR[DR7] =0, PA7 can also be CLK1, TIN1, LIRCLKA, or all three. The 
connections are made separately in the serial interface and timer mode registers. 


— If PADIR[DR7] = 1, PA7 can also be BRGO1. If PA7 is a general-purpose I/O 
signal, the input to the on-chip peripheral is connected internally to BRGO1. 
Chapter 20, “Serial Interface,’ describes CLK1 and LIRCLKA. 
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e PA4 can be configured as a general-purpose I/O signal but not an open-drain signal. 


— If PADIR[DR4] = 0, PA4 can be CLK4 and/or TIN4. If DR4 = 1, PA4 can be 
TOUT2. 


— If PA4 is a general-purpose I/O signal, the on-chip CLK4 function is grounded. 





34.2.3 Port A Functional Block Diagrams 


Using PA15 as an example, Figure 34-5 shows the functional block diagram for all port A 
signals without open-drain capability. 



















Read Path To 
PADAT[15] ~*~ ¢ 7 
Write Path From EN i 
PADAT[15] USBRXD/PA15 
Pin 
Output 
Latch 
































To USB 
| 
6. 
16-Bits | 
PAPAR 


Figure 34-5. Block Diagram for PA15 (True for all Non-Open-Drain Port Signals) 


Using PA14 as an example, Figure 34-6 shows the functional block diagram for all port A 
signals with open-drain capability. 
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Figure 34-6. Block Diagram for PA14 (True for all Open-Drain Port Signals) 


34.3 Port B 


All port B signals can be open-drain. They are configured independently as general-purpose 
I/O signals if the corresponding bit in the PBPAR is cleared and they are configured as 
dedicated on-chip peripheral signals if the corresponding PBPAR bit is set. When 
configured as a general-purpose I/O signal, the signal direction of that signal is determined 
by the corresponding control bit in the PBDIR. The port I/O signal is configured as an input 
if the corresponding PBDIR bit is cleared and it is configured as an output if the 
corresponding PBDIR bit is set. All PBPAR bits and PBDIR bits are cleared by hardware 
reset, thus configuring all port B signals as general-purpose inputs. Table 34-6 describes 
port B signal options. If a port B signal is selected as a general-purpose I/O signal, it can 
be accessed through the PBDAT where data is stored in an output latch. If a port B signal 
is configured as an output, the output latch data is gated onto the port signal. When PBDAT 
is read, the port signal itself 1s read. 


All port B signals can have multiple configurations, which include on-chip peripheral 
functions for SPI, I°C, SMCs, SCC3, and the TDM. 


PB[26-—27] are special in that their on-chip peripheral functions (BRGO1 and BRGOZ2) are 
also available in port A. This allows an alternate way to output BRG signals if other 
functions are used. PB[16, 18] are special in that their on-chip peripheral functions (RTS2 
and L1RQa) are available in port C providing an alternate location to output these signals 
if other functions on port C are used. 





MOTOROLA _ Chapter 34. Parallel I/O Ports 34-7 


Uiiibbanninti a ADGA DOL DEE MASE ODD LILIA SAIS OL EA MAGES AD OAD S a DIOS DSS D RASS DROSRASA RD SD SARA DARA ODS AS RADDA DAD DAIS AAAS DSSS DS ODS ASE LMESR SABRE SA ARE SASESEDS DEALS SSS SS DLADSADASS SEE RDOS SOS SARSDSLSDDDODA SDDS AAAA OSES SSGLD SANA SSAA ARRAS SEEDS SOAS ES DASESDDES EAS SASS ISAS A SORSEARESD SSDS SSOAADEE IEEE AIS OLDES SAAS ODS DSSASED SDD DIDS SOD DORADA SSE ENS O SAAS RASA AI SUAS BOSE AAD Otte AES ERNIE EDDIE ND OLDE DEDEDE SE DOA 





Part V. The Communications Processor Module 


Table 34-6. Port B Pin Assignment 


Signal Function 


| PBPAR[DDn] = 1 
| PBPAR[DDn] = 0 3 
PBDIR[DRn]=0 | PBDIR[DRn]=1 


rest [eres [wm 
ee 
[ees [roves | ewmor [mos 






Input to On-chip Peripherals 
(Default) 













TS2 
PB17 Port B17 L1ST3 po 
PB16 PortBi6 | List4 LiROa 


34.3.1 The Port B Registers 


The four port B control registers determine whether a signal is open-drain, input or output, 
and general-purpose or dedicated to a peripheral. 


34.3.1.1 Port B Open-Drain Register (PBODR) 


The port B open-drain register (PBODR) indicates when the port signals are configured in 
a normal or wired-OR configuration. PBODR is cleared by system reset. 












Figure 34-7. Port B Open-Drain Register (PBODR) 
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Table 34-7 describes PBODR bits. 
Table 34-7. PBODR Bit Descriptions 


Reserved 







Ls 5, 
20-21 


16-19, 
| 22-31 


34.3.1.2 Port B Data Register (PBDAT) 


Reading the port B data register (PBDAT) returns data to the signal, regardless of whether 
it is an input or output. This allows output conflicts to be found on the signal by comparing 
the written data with the data on the signal. Data written to PBDAT is latched; if the 
corresponding PBDIR bit is configured as an output, the latched value is driven onto its 
respective signal. PBDAT can be read or written at any time and is not initialized. 







Port B open-drain configuration. 
0 The I/O signal is actively driven as an output. 
1 The I/O signal is an open-drain driver. As an output, the signal is actively driven low. Otherwise, 
it is three-stated. | 
Note that SMTXD1 cannot be configured as an open-drain driver, regardless of PRODR[OD25). 


Undefined 


[or7[ore [oie] | [p22 | pea | o24 | bas | pas | 27 [pas | oz | pao | Dot 
Undefined 
pr} Rw Awl Rw} | [Rw | Rw] Ra | Rv | Raw | Rw | Rv | RAW | RW | FW | 


Figure 34-8. Port B Data Register (PBDAT) 





Table 34-2 describes PBDAT bits. 
Table 34-8. PBDAT Bit Descriptions 


Co) 
0-15, Reserved 
20-21 

| ae Contains the data on the corresponding signal. 
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34.3.1.3 Port B Data Direction Register (PBDIR) 

Port B data direction register (PBDIR) bits configure port B signals as general-purpose 
inputs or outputs. If a signal is not programmed for general-purpose I/O, PBDIR selects the 
peripheral function to be performed. 


DRi6 DRi8|DR19 | — | — | DR22 
||| [| | | | 


Figure 34-9. Port B Data Direction Register (PBDIR) 





Table 34-9 describes PBDIR bits. 


Table 34-9. PBDIR Bit Descriptions 
= 
6 2-8 


Se A 
16-19, | Port B data direction. Configures port B signals as inputs or outputs when functioning as 


22-31 general-purpose I/O; otherwise, used to select the peripheral function. 
0 Select the signal for general-purpose input, or select peripheral function 0. 


1 Select the signal for general-purpose output, or select peripheral function 1. 





34.3.1.4 Port B Pin Assignment Register (PBPAR) 


The port B pin assignment register (PBPAR) configures signals as general-purpose I/O or 


dedicated for use with a peripheral. 
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Figure 34-10. Port B Pin Assignment Register (PBPAR) 


Table 34-10 describes PBPAR bits. 
Table 34-10. PBPAR Bit Descriptions 


3; 


7 oo nr ae 
i? Port assignment. Determines whether a signal is configured for general-purpose I/O or dedicated 














peripheral function. 

0 General-purpose I/O. The peripheral functions of the signal are not used. 
1 Dedicated peripheral function. The signal is used by the internal module. The on-chip peripheral 
function to which it is dedicated can be determined by other bits such as those in the PBDIR. 


34.4 Port C 


Port C consists of 12 general-purpose I/O signals that can generate interrupts, which are 
managed by the CPM interrupt controller (CPIC). Table lists port C signal options. 


Table 34-11. Port C Pin Assignment 


PCPAR[DDn] = 0 PCPAR[DDn] = 1 Input to On-Chip 


Se be 
Pics a 
Preto a 
Precis a ae reece 

omega! 


rence 

[revo on 
[ro << 
[ec ano 
ce oN 
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Table 34-11. Port C Pin Assignment (Continued) 





PCPAR[DDn] = 0 PCPAR([DDn] = 1 Input to On-Chip 
Peripherals 
PCDIR[DRn] =1 | PCDIR[DRn]=0 _ Zz 
or PCSO[n] =0 | and PCSO[n] = 1 PCDIR[DRn] = 0 | PCDIR[DRn] = 1 (Default) 


ne 











Port C5 CTS3 LiTSYNCA SDACKi | 
Port C4 | CDS CD3 LiRSYNCA CD3 = GND 


PCDIR and PCPAR bits are cleared at system reset, making all port signals general-purpose 
inputs. The CPM interrupt mask register (CIMR) (see Section 35.5.3, “CPM Interrupt 
Mask Register’) is also cleared, so port C I/O signals left floating do not cause false 
interrupts. 





General-purpose port C I/O signals can be accessed through PCDAT where written data is 
stored in an output latch. If a port C signal is configured as an output, output latch data 1s 
gated onto the port signal. Reading PCDAT reads the value of the port signal itself. For port 
C input signals, data written to PCDAT is stored in the output latch but cannot reach the 
port signal. In this case, when the PCDAT register is read, the state of the port signal 1s read. 


‘The following steps configure port C signals as general-purpose outputs. When the signal 


is configured as an output, port C interrupts are not generated. 
1. Write the corresponding PCPAR bit with a 0. | 
2. Write the corresponding PCDIR bit with a 1. 
3. Write the corresponding PCSO bit with a zero (for clarity). 
4. The corresponding PCINT bit is a ‘don’t care’. 
5. Write the signal value using the PCDAT register. 
The following steps can be taken to configure a port C signal as a general-purpose input 
signal that does not generate an interrupt: 
1. Write the corresponding PCPAR bit with a zero. 
2. Write the corresponding PCDIR bit with a zero. 
3. Write the corresponding PCSO bit with a zero. 
4. The corresponding PCINT bit is a ‘don’t care’ bit. 
5 


. Write the corresponding CIMR bit with a zero to prevent interrupts from being 
generated to the core. 


6. Read the signal value using the PCDAT register. 
When a port C signal is configured as a general-purpose I/O input, a change in the port C 


interrupt register (PCINT) causes an interrupt request signal to be sent to the CPIC. Each 
port C signal can be configured to assert an interrupt request either when a high-to-low 


LSSPESPRIDEID ODD ADY SADDLE DOSS ODOS RODS UE ARUN AAA HTS AA MEARNS SONIA EAA ABAD ALARA RARER A SS Seno ces Eta bt Soto ponD ORD ASAT SAS AALE DEEROU SSSI GIA SEU AAD ODE RARE AAA AAA ASIA RER AS AOGASASE ADE ASS AS ROAD AIASAASASEORS AOR EEEDS AA AE AEA AA LESSER ERED SDS SOOS DAIS SAAR ASSASSINS SAS AEST AA BSE AC SAUL DOMED SIRS ANY EEDA DRS EE SADIE ADD USE ASSES OAR DOBRO ED OSDINEAI I) SESS NDE IRONED ADD SOO nb oO DOD DEDEDE ANA A AD RnnAAn Tae 
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change occurs or when any change occurs. Each port C signal asserts a unique interrupt 
request to the CPM interrupt pending register (CIPM) (see Section 35.5.2, “CPM Interrupt 
Pending Register (CIPR)”) and has a different internal interrupt priority level within the 
CPM interrupt controller (see Section 35.2, “CPM Interrupt Source Priorities.” 


Requests can be masked independently in the CPM interrupt mask register (CPMR). See 
Section 35.5.3, “CPM Interrupt Mask Register.’ The following steps configure a port C 
signal as a general-purpose input that generates an interrupt: 


1. Write the corresponding PCPAR bit with a 0. 

Write the corresponding PCDIR bit with a 0. 

Write the corresponding PCSO bit with a 0. 

Set the PCINT bit to determine which edges cause interrupts. 


Write the corresponding CIMR bit with a 1 so that interrupts can be sent to the core. 


Oh ot ban a 


Read the signal value using the PCDAT register. 


The port C signals associated with CDx and CTSx have a mode of operation in which the 
signal can be connected to the SCC internally but can also generate interrupts. Port C still 
detects changes on CTS and CD and asserts the corresponding interrupt request, but the 
SCC simultaneously uses CTS and/or CD to control operation automatically. This allows 
the implementation of V.24, X.21, and X.21 bis protocols with help from other 
general-purpose I/O signals. To configure a port C signal as a CTS or CD signal that 
connects to the SCC and generates interrupts, follow these steps: 


1. Write the corresponding PCPAR bit with a 0. 

Write the corresponding PCDIR bit with a 0. 

Write the corresponding PCSO bit with a 1. 

Set the PCINT bit to determine which edges cause interrupts. 


Write the corresponding CIMR bit with a 1 so that interrupts can be sent to the core. 


oe oe a ae 


The signal value can be read at any time using the PCDAT register. 


After connecting CTS or CD to the SCC, choose normal operation mode in GSMR[DIAG] 
to enable or disable SCC transmission and reception with these signals. 


PC14 and PC15 can be programmed to assert special requests directly to the CPM by 
setting RCCR[EIE]; however, do not do so unless instructed by a Motorola-supplied RAM 
microcode package. 


For IDMA, PC14 and PCI5 can be programmed to function as external DMA request 
(DREQx) signals. Do not configure PC14 and PC15 as DREQ1 and DREQO unless IDMA 
is initialized; otherwise, erratic operation can occur. 
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34.4.1 Port C Registers 


Port C is supported by five registers. The port C interrupt control register (PCINT) defines 
how changes on the signal cause interrupts when they are generated with that signal. The 
port C special options register (PCSO) determines whether certain port C signals can 
connect to on-chip peripherals and generate an interrupt at the same time. The remaining 
port C registers (PCDAT, PCDIR, and PCPAR) have the same functions as their 
counterparts on ports A and B. Port C has no open-drain capability. 


34.4.1.1 Port C Data Register (PCDAT) 
When read, the port C data (PCDAT) register always reflects the current status of each line. 





Figure 34-11. Port C Data Register (PCDAT) 
Table 34-12 describes PCDAT bits. 
Table 34-12. PCDAT Bit Descriptions 








= Ae, eae RRR EUR 
—15 Dn Contains the data on the corresponding signal. 


34.4.1.2 Port C Data Direction Register (PCDIR) 

Port C data direction register (PCDIR) bits configure port C signals as general-purpose 
inputs or outputs. If a signal is not programmed for general-purpose I/O, PCDIR, along 
with PCSO, selects the peripheral function to be performed. 


+ 





0000_0000_0000_0000 


Figure 34-12. Port C Data Direction Register (PCDIR) 
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Table 34-13 describes PCDIR bits. 


Table 34-13. PCDIR Bit Descriptions 


Port C data direction. Configures port C signals as inputs or outputs when functioning as 
general-purpose 1/O; otherwise, used with PCSO to select the peripheral function. 

0 Select the signal for general-purpose input, or select peripheral function 0. 

1 Select the signal for general-purpose output, or select peripheral function 1. 





34.4.1.3 Port C Pin Assignment Register (PCPAR) 


The port C pin assignment register (PCPAR) configures signals as general-purpose I/O or 
dedicated for use with a peripheral. 


DD | DD9 | pp10| pp11 pp14| pp15 


0000_0000_0000_0000 
R/W 





Figure 34-13. Port C Pin Assignment Register (PCPAR) 
Table 34-14 describes PCPAR bits. 
Table 34-14. PCPAR Bit Descriptions 


a 


Configures a signal for general-purpose I/O or for dedicated peripheral function 

0 General-purpose I/O. The peripheral functions of the signal are not used. 

1 Dedicated peripheral function. The signal is used by the internal module. The on-chip 
peripheral function to which it is dedicated can be determined by other bits. 





34.4.1.4 Port C Special Options Register (PCSO) 
The port C special options (PCSO) register is a 16-bit read/write register. Each bit defined 


ote |c02 | crse| man] wer | — | [oneax one 





Figure 34-14. Port C Special Options Register (PCSO) 
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Table 34-15 describes PCSO bits. 
Table 34-15. PCSO Bit Descriptions 


Reserved, should be cleared. 


Carrier detect 


O PCx is a general-purpose interrupt I/O signal. The SCC internal CDx signal is always asserted. If 
PCDIR configures CDx as an input, it can generate an interrupt to the core, as controlled by the 
PCINT bits. 


1 PCx is connected to the corresponding SCC input as well as being a general-purpose interrupt 
signal. 


Clear to send 


0 PCx is a general-purpose interrupt I/O signal. The SCC internal CTSx signal is always asserted. If 
PCDIR configures this signal as an input, the signal can generate an interrupt to the core, as 
controlled by the PCINT bits. 


1 PCx is connected to the corresponding SCC input as well as being a general-purpose interrupt 
signal. 


USBRXN data signal 


0 PCx is a general-purpose interrupt I/O signal. If PCDIR configures this signal as an input, the 
signal can generate an interrupt to the core, as controlled by the PCINT bits. 
1 PCx is the USBRXN data signal. 


USBRXP data signal 


0 PCx is a general-purpose interrupt I/O signal. If PCDIR configures this signal as an input, the 
signal can generate an interrupt to the core, as controlled by the PCINT bits. 
1 PCx is the USBRXP data signal. 


2-13)— | Reserved and should be cleared. 


14—15 | DREQx | Enable DMA request to the CPM. Set DREQx only if IDMA is being used. Note that the IDMA request 
function and the general-purpose interrupt function operate concurrently and independently. 
0 PCx is a general-purpose interrupt I/O signal. If PCDIR configures this signal as an input, the 
signal can generate an interrupt to the core, as controlled by the PCINT bits. 


1 As well as being a general-purpose interrupt signal PCx becomes an external request to the CPM 
for IDMA service. RCCR[DRxM] controls whether IDMA requests are edge- or level-sensitive. The 
corresponding PCINT bits still control when a general-purpose interrupt is generated. 





34.4.1.5 Port C Interrupt Control Register (PCINT) 


Each bit of the port C interrupt control (PCINT) register, shown in Figure 34-15, 
corresponds to a port C signal to determine whether that line asserts an interrupt request on 
a high-to-low transition or on any transition. PCINT is cleared by reset. 





Figure 34-15. Port C Interrupt Control Register (PCINT) 
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Table 34-16 describes PCINT bits. 
Table 34-16. PCINT Bit Descriptions 


9 nk 
| Reserved and should be cleared. 


Edge detect mode. The corresponding port C signal asserts an interrupt request. 
O Any edge on PCx generates an interrupt request. 
1 A falling edge on PCx generates an interrupt request. 









34.5 Port D 


The 13 port D signals are configured independently as general-purpose I/O signals if the 
corresponding port D pin assignment register (PDPAR) is cleared. They are configured as 
dedicated on-chip peripheral signals if the corresponding PDPAR bit is set. 


The port I/O signal is configured as an input if the corresponding bit in the port D data 
direction register (PDDIR) is cleared and as an output if the bit is set. PDPAR and PDDIR 
are cleared at system reset, which configures all port D signals as general-purpose inputs. 
Table describes port D signal defaults. 


Table 34-17. Port D Pin Assignment 


Pin Function 
PDPAR[DDn]=0 | PDPAR[DDn] = mBuete “(beta 


[roe [pore 
[08 [ronroe 
[r06 [porroe 
ro 
[08 



















PORT D5 
PORT D4 
PORT D3 
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Specialized versions of the MPC850 multiplex the port D signals with other functions, such 
as an ATM UTOPIA interface or 1OOBASE-T MII (media-independent interface). See the 
specific part’s supplementary documentation for details. 


34.5.1 Port D Registers 


Port D has three memory-mapped, read/write control registers. 


34.5.1.1 Port D Data Register 


A read of the port D data (PDDAT) register returns the value of the signal, regardless of 
whether it is an input or output. This allows output conflicts to be found on the signal by 
comparing the written data with the data on the signal. A write to a PDDAT bit is latched, 
and if configured as an output, is driven onto its respective signal. PDDAT can be read or 
written at any time. PDDAT is not initialized and is undefined by reset. 


ee Ds-D15 


| Undefined 





Figure 34-16. Port D Data Register (PDDAT) 


Table 34-18 describes PDDAT bits. 
Table 34-18. PDDAT Bit Descriptions 


cd 
= [Reserved 
Jon | Contains the data on the corresponding signal. 


34.5.1.2 Port D Data Direction Register (PDDIR) 


The port D data direction register (PDDIR) provides bits for specifying whether port D 
signals are inputs or outputs when functioning as general-purpose I/O. 












= [ors] ore ons] one on7 | ne [ono [ono] ons | on] onto | On [OAS 
re 


Figure 34-17. Port D Data Direction Register (PDDIR) 
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Table 34-19 describes PDDIR bits. 


Table 34-19. PDDIR Bit Descriptions 


Reserved and should be cleared. 


Port D data direction. Configures port D signals as inputs or outputs when functioning as 
general-purpose 1/O. 

0 The corresponding signal is an input. 

1 The corresponding signal is an output. 





34.5.1.3 Port D Pin Assignment Register (PDPAR) 
The port D pin assignment register (PDPAR) configures signals as general-purpose I/O or 
dedicated for use with a peripheral. 


DD3-—DD15 
0000_0000_0000_0000 
R/W 





Figure 34-18. Port D Pin Assignment Register (PDPAR) 


Table 34-20 describes PDPAR bits. 
Table 34-20. PDPAR Bit Descriptions 
Description 


Reserved and must be cleared. Note that setting bits 0 or 1 causes erratic behavior resulting in 
CPM lockup. (These bits apply only for the MPC860SAR and MPC850SAR.) 


| Configures a signal for general-purpose I/O or for dedicated peripheral function 
0 General-purpose I/O. The peripheral functions of the signal are not used. 
1 Dedicated peripheral function. The signal is used by the internal module. The on-chip 
peripheral function to which it is dedicated can be determined by other bits. 
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Chapter 35 
CPM Interrupt Controller 


The CPM interrupt controller (CPIC) accepts and prioritizes the internal and external 
interrupt requests from the CPM blocks and passes them to the system interface unit (SIU). 
The CPIC also provides a vector during the core interrupt acknowledge cycle. 


35.1 Features 
The following is a list of the CPIC’s main features: 


e Twenty-seven interrupt sources— 15 internal and 12 external (through port C) 

e Sources can be assigned to a programmable interrupt level 

¢ Programmable priority between USB and SCCs 

e Two priority schemes for USB and SCCs 

¢ Programmable highest priority request 

e Fully-nested interrupt environment 

e Individual interrupt sources can be masked in the CPM interrupt mask register 
(CIMR). 

e Unique vector number for each interrupt source 


The CPIC manages interrupts from internal CPM sources. These sources are primarily 
generated by controllers, such as the USB, SCCs, SMCs, SPI, and I7C but also include the 
12 general-purpose timers and port C parallel I/O signals described in Section 34.4, “Port 
C.” More than one of these sources may generate interrupts at the same time; therefore, the 
CIMR register is provided for masking individual sources. Additional masking is provided 
for specific interrupt events within each controller that reports interrupts through the CPIC. 
These mask registers are described in the chapters that describe individual controllers. All 
CPIC-managed interrupt sources are prioritized and bits are set in the CPM interrupt 
pending register (CIPR). 


Figure 35-1 shows the MPC850 interrupt structure. The left of the figure shows individual 
interrupt sources managed by the CPIC, which signals CPIC-managed interrupts to the 
SIU, shown in the middle of Figure 35-1. All interrupts signaled by the CPIC are presented 
to the SIU at a single programmable priority level (0-7). In turn, the SIU controls which 
PowerPC architecture-defined external interrupt exception condition is reported to the 
PowerPC core. 
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For information about the SIU interrupt structure, see Section 10.5.1, “Interrupt Structure.” 


For information about the external interrupt exception, see Section 6.1.2.5, “External 
Interrupt Exception (0x00500).” 


System Interface Unit (SIU) 


Software 
Communications Processor Module | maleic ne NMI 
(CPM) 


Generator 


System Reset 


Port C[4~15] interrupt 


>| Decrementer 
CPM Timer[1—4] 


USB — 





SCC[2-3] 


SMC[1-2] CPM Periodic 
at ri interrupt Timer 
Spl ontroller 
Interrupt External 
Interrupt 





ller 
ec Real-Time ee 


Clock 
IDMA[1-2] 


SDMA 





RISC Timers 





Figure 35-1. MPC850 Interrupt Structure 


Although all CPM interrupts are presented to the SIU at the same priority level (specified 
in CICR[IRL]), individual CPM interrupt sources are prioritized as described in 
Section 35.2, “CPM Interrupt Source Priorities.’ The MPC850 provides limited ability to 
reorder the interrupt priorities of the USB and SCCs and to specify the highest priority 
interrupt source. 


As shown in Figure 35-1, when the CIPR indicates that an unmasked interrupt source is 
pending, the CPIC sends an interrupt request to the SIU at the interrupt level specified in 
CICR[IRL]. The CPIC then waits for the interrupt to be recognized. The core honors the 
interrupt request and then acknowledges the interrupt by setting the [ACK bit in the CPM 
interrupt vector register (CIVR). When CIVR[IACK] is set, the contents of CIVR[VN] are 
updated with the 5-bit vector corresponding to the sub-block with the highest current 
priority. CIVR[IACK] is cleared after one clock cycle. 
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35.2 CPM Interrupt Source Priorities 


The CPIC has 27 interrupt sources that assert a single programmable interrupt request level 
to the core. Default interrupt priorities are as shown in Table . 
Table 35-1. Prioritization of CPM Interrupt Sources 


Baton Goad Multiple oe 7 Multiple 
Source Description Priority Source Description Events 


Ox1F ‘| Parallel I/O-PC15! No OxOF | Parallel /O-PC11 ! No 
(Highest) 


Ox1E |SCCa ? (grouped and spread) 


Yes 
2 ) Yes 
No 
















Parallel /O-PC10 ! No 





Ox0E 


Ox0D |SCCc 2 (spread) Yes 





( 
<a 


o 








es 

No 
0x16 Yes 0x06 | Parallel /O-PC6 
0x13 0x03 | SMC2/PIP Yes 
0x12 0x02 | Parallel VO-PCS " No 
0x11 | RISC timer table 0x01 |ParallelVO-PC4' | No 
0x10 Yes 0x00 Reserved z — 





| (Lowest) 


| Port C interrupts (external sources) are described in Section 34.4.1.5, “Port C Interrupt Control Register 
(PCINT).” 

2 USB and SCCs can be programmed to any of these locations. Group and spread are described in 
Section 35.2.1, “Programming Relative Priority (Grouping and Spreading).” 


The only true SDMA interrupt source is the SDMA channel bus error entry that is reported 
when a bus error occurs during an SDMA access. Other SDMA-related interrupts are 
reported through each individual USB, SCC, SMC, SPI, or °C channel. USB/SCCs 
interrupts can be reprioritized as described in the next two sections. 





35.2.1 Programming Relative Priority (Grouping and Spreading) 


The relative priority between the USB and 2 SCCs is programmable dynamically through 
CICR[SCnP], shown in Table 35-3. Table 35-1 has no explicit entry for USB and SCCs 
because the entries can be mapped to any of these locations. This is programmed in the 
CICR (see Table 35-3). 


ARR RS 
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USB and SCC entries can be grouped or spread by clearing or setting CICRISPS], 
respectively; SPS cannot be changed dynamically. These options are described as follows: 


¢ IfSPS=1,theUSB and 2 SCCs are grouped at the top of the priority table, ahead of 
most other CPM interrupt sources. Grouping is useful whereUSB and 2 SCCs 
function at a very high data rate and interrupt latency is critical. 


e If SPS =0, theUSB and 2 SCC priorities are spread over the table so other sources 
can have lower interrupt latencies than the USB and SCCs. 


35.2.2 Highest Priority Interrupt 


The highest priority interrupt source can be selected dynamically by entering the interrupt 
number in CICR[HPn], described in Table 35-3. This interrupt is still within the same 
interrupt level specified in CICR[IRL] but is serviced before any other CPM interrupt (that 
is, if this type of interrupt is pending, its vector number returns first when the CIVR is read. 


35.2.3 Nested Interrupts 


The CPIC supports a fully nested interrupt environment that allows a high priority interrupt 
from another CPM source to suspend a lower priority service routine. An interrupt request 
with highest priority is presented to the core for servicing, which the core acknowledges by 
setting CIVR[IACK]. After [ACK is set, the corresponding vector is indicated in the CIVR 
and the request is cleared. The next request can be presented to the core. When the interrupt 
is taken, the external interrupt enable bit of the core’s machine state register, MSR[EE] is 
cleared to disable further interrupt requests until software can handle them. 


The CPM interrupt in-service register (CISR) can be used to allow a higher priority 
interrupt within the same interrupt level to be presented to the core before a lower priority 
interrupt service completes. Each CISR bit corresponds to a CPM interrupt source. When 
the core acknowledges the interrupt by setting IACK, the CPIC sets the CISR bit for that 
interrupt source. This prevents subsequent CPM interrupt requests at this priority level or 
lower, until the current interrupt is serviced and the CISR bit is cleared. Lower-priority 
interrupts can still be set in the CPIC during this time, but they will pend until the CISR bit 
for the higher-priority interrupt is cleared. Therefore, in the interrupt service routine for the 
CPM interrupts, the core external interrupt enable MSR[EE] can be set to allow 
higher-priority interrupts within the CPM or from other sources to generate an interrupt 
request. 


35.3 Masking Interrupt Sources in the CPM 


An interrupt is masked by clearing and enabled by setting the corresponding CIMR bit; see 
Section 35.5.3, “CPM Interrupt Mask Register”’ When a masked source requests an 
interrupt, the corresponding CIPR bit is set but the CPIC does not signal the interrupt to the 
core. Masking all sources allows the implementation of a polling interrupt servicing 
scheme. 


SERN EE EO OEE EO EE EE SEES EE" CSOT ESSE EEE EEE EE RECEDES RE OOOO CLERC EEE EERE EEE EERE SELLE 
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CPM sub-blocks with multiple interrupting events can be masked individually by 
programming a mask register within that block (such as the SMC UART register (SMCM), 
described in Section 30.3.12, “SMC UART Event Register (SMCE)/Mask Register 
(SMCM)”). Tabie 35-2 shows the interrupt sources that have multiple interrupting events. 
Figure 35-2 shows masking using the SMC sub-block. 


SMCEx 3 4 5 


[ox] 


7 SMCMx 3 


6 4 5 6 7 
++ [ow] - ler] me 


i: 
































SMCx Interrupt to CPIC 
Figure 35-2. Interrupt Request Masking 


The following procedure prevents possible interrupt errors when modifying mask registers, 
such as the CIMR, SCCM, SMCM, or any other CPM interrupt mask: 


1. Clear MSR[EE]. (Disable external interrupts to the core.) 
2. Modify the mask register. 
3. Set MSR[EE]. (Enable external interrupts to the core.) 


This mask modification procedure ensures that an already pending interrupt is not masked 
before being serviced. Masking a pending interrupt causes the interrupt error vector (see 
Table 35-2) to be issued if no other valid CPM interrupts are pending. (The error vector 
cannot be masked.) 


35.4 Generating and Calculating Interrupt Vectors 


Unmasked CPM interrupts are presented to the core in order of priority. The core responds 
to an interrupt request by setting CIVR[IACK]. The CPIC passes the five low-order bits of 
the vector corresponding to the highest priority, unmasked, pending CPM interrupt in 
CIVR[VN]. These encodings are shown in Table 35-2. 
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ae Table 35-2. Interrupt Vector Encodings 


OxiF | __- Parallel /O-PC15 Parallel /O—PC11 
| USB Fano: | oxoE Parallel /O—PC10 
[error 
ee 
ee | 
RISC timer table | 10001 | Parallel YO—PC4 


The table is the same as the CPM interrupt priority table (Table 35-1) except that the USB 
and 2 SCC vector numbers are fixed and are not affected by the ability to reprioritize the 
USB and SCCs described in Section 35.5.2, “CPM Interrupt Pending Register (CIPR).” 
Also the last entry in this table is the error vector, which the CPM issues if it requested an 
interrupt that the user masked before the core serviced it and no other interrupts for the 
CPM are pending. The user should provide an error interrupt service routine even if it is 
only an rfi instruction. 













































Parallel (O—PC6 
| 0x04 SMC1 
Parallel VO—PCS5 































35.5 CPIC Registers 


There are four CPIC registers: 
¢ CPM interrupt configuration register (CICR)— Defines CPM interrupt attributes. 


e CPM interrupt pending register (CIPR)—Indicates which CPM interrupt sources 
require interrupt service. 


° CPM interrupt mask register (CIMR)—Can be used to mask CPM interrupt sources. 
¢ CPM interrupt in-service register (CISR)— Allows nesting interrupt requests within 
the CPM interrupt level. 


Note that the names and placement of bits is identical in the CIPR, CIMR, and CISR. 
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35.5.1 CPM Interrupt Configuration Register (CICR) 


The CPM interrupt configuration register (CICR) defines CPM interrupt request levels, the 
priority between the USB and SCCs, and the highest priority interrupt. 


Figure 35-3. CPM Interrupt Configuration Register (CICR) 


SObP 






0000_0000_0000_0000 


R/W 
0x942 


CICR bits are described in Table 35-3. 
Table 35-3. CICR Field Descriptions 


os 
| Reserved, should be cleared. 


SCCd priority order. Defines whether USB or SCCs asserts its request in the SCCd priority position. | 
00 USB asserts its request in the SCCd position. 

01 SCC2 asserts its request in the SCCd position. 

10 SCC3 asserts its request in the SCCd position. 





0-7 


SCCc priority order. Defines whether USB or SCCs asserts its request in the SCCc priority position. | 
00 USB asserts its request in the SCCc position. 

01 SCC2 asserts its request in the SCCc position. 

10 SCC3 asserts its request in the SCCc position. 


SCCb priority order. Defines whether USB or SCCs that asserts its request in the SCCb priority 
position. 

00 USB asserts its request in the SCCb position. 

01 SCC2 asserts its request in the SCCb position. 

10 SCC3 asserts its request in the SCCb position. 


SCCa priority order. Defines whether USB or SCCs that asserts its request in the SCCa priority 
position. 

00 USB asserts its request in the SCCa position. 

01 SCC2 asserts its request in the SCCa position. 

10 SCC3 asserts its request in the SCCa position. 


Interrupt request level. Contains the priority request level of the interrupt from the CPM that is sent to 
the SIU. Level 0 indicates highest priority. IRL is initialized to zero during reset. In most systems, 
value 0b100 is a good value to choose for IRL. 
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Table 35-3. CICR Field Descriptions (Continued) | 


Highest priority. Specifies the 5-bit interrupt number of the CPIC interrupt source that is advanced to 
the highest priority in the table. These bits can be modified dynamically. (Programming HP = 
0b11111 keeps PC15 the highest priority source for external interrupts to the core.) 





Interrupt enable. Master enable for CPM interrupts. 
0 CPM interrupts are disabled 


| 1 CPM interrupts are enabled 


Reserved 


Spread priority scheme. Selects the relative priority scheme; cannot be changed dynamically. 
0 Grouped. The USB and SCCs are grouped by priority at the top of the table. 
1 Spread. The USB and SCCs are spread by priority in the table. 


' Note: Do not program the USB or the to more than one priority position (a, b, c, or d). These bits can be changed 
dynamically. 


35.5.2 CPM Interrupt Pending Register (CIPR) 


Each bit in the read/write CPM interrupt pending register (CIPR) corresponds to a CPM 
interrupt source. The CPIC sets the appropriate CIPR bit when a CPM interrupt is received. 
Names and placement of bits, shown in Figure 35-4, are identical in the CIPR, CIMR, and 
CISR, and they follow the priorities described in Table 35-1. 


scc2| SCC3 i pc14] TIMER |PC13! PC12 | SDMA! IDMAt ca ian i Sa 


0000_0000_0000_0000 
R/W 


0x944 (CIPR), 0x948 (CIMR), 0x94C (CISR) 


rrp] — [mera] roo] reo] rer | — [mrs] reo] [cs] sce] ros | roa] — 


0000_0000_0000_0000 





0x946 (CIPR), 0x94A (CIMR), 0x94E (CISR) 
Figure 35-4. CPM Interrupt Pending/Mask/in-Service Registers (CIPR/CIMR/CISR) 


In a vectored interrupt scheme, the CIPR clears the appropriate CIPR bit when the core 
acknowledges the interrupt by setting CIVR[IACK]. The vector number corresponding to 
the CPM interrupt source is then available for the core in CIVR[VN]. However, the CIPR 
bit is not cleared if an event register exists for that interrupt source. Event registers exist 
only for interrupt sources with multiple interrupt events (for example, the SCCs). 
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In a polled interrupt scheme, the user must periodically read the CIPR. After a pending 
interrupt is handled, clear the corresponding CIPR bit. However, if an event register exists, 
clear the unmasked event register bits instead, thus causing the CIPR bit to be cleared. Write 
ones to clear CIPR bits; writing zeros has no effect. 


In a polled interrupt scheme, the user must periodically read the CIPR. After handling a 
pending interrupt, clear the corresponding CIPR bit directly for interrupt sources from port 
C pins. For all other interrupt sources, however, clear the unmasked event register bits 
instead, thus causing the CIPR bit to be cleared. Write ones to clear CIPR bits; writing zeros 
has no effect. 


The USB and SCCs CIPR bit positions are not changed according to their relative priority 
(as determined by CICR[SCxP] and CICR[SPS]). If the error vector is issued in the CIVR, 
this means that no CIPR bits were cleared when CIVR[IACK] was set. 


35.5.3 CPM Interrupt Mask Register 


Each bit in the read/write CPM interrupt mask register (CIMR) corresponds to a CPM 
interrupt source indicated in CIPR. The CIPR and CIMR are shown in Figure 35-4. An 
interrupt is masked by clearing and enabled by setting the corresponding CIMR bit. Even 
if an interrupt is masked, the corresponding CIPR bit is set when an interrupt condition 
occurs, but the interrupt request is not passed to the core. 


If a CPM interrupt source is requesting interrupt service when its CIMR bit is cleared, the 
request stops. If the bit is set later, the core processes previously pending interrupt requests 
according to priority. 


The CIMR[USB, SCCx] bit positions are unaffected by the relative priority programmed in 
the configuration register, CICR. 


35.5.4 CPM Interrupt In-Service Register (CISR) 


Each bit in the CPM interrupt in-service register (CISR) corresponds to a CPM interrupt 
source. The CISR, CIPR, and CIMR are shown in Figure 35-4. In a vectored interrupt 
environment, the CPIC sets a CISR bit when the core acknowledges the interrupt by setting 
CIVR[IACK]. An interrupt service routine must clear IACK after servicing is complete. If 
an event register exists for this peripheral, its bits would normally be cleared. Write ones to 
clear CISR bits; writing zeros has no effect. 


Bits set in this register indicate which interrupt requests are in progress for each CPM 
interrupt source. More than one CISR bit can be set if higher priority CPM interrupts are 
allowed to interrupt lower priority level interrupts within the same CPM interrupt level. For 
example, the TIMER] interrupt routine could interrupt the TIMER2 interrupt handler. See 
Section 35.2.3, “Nested Interrupts.” During this time, the user can set CISR[TIMER1] and 
CISR[TIMER2] simultaneously. 
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The USB and SCCs CISR bit positions are not affected by the relative priority between one 
another. If the error vector is taken, no CISR bit is set. All undefined CISR bits return zeros 
when read. The extent to which CPM interrupts can interrupt one another is controlled by 
selectively clearing the CISR. A new interrupt is processed if it has a higher priority than 
the highest priority interrupt having its CISR bit set. Thus, if an interrupt routine sets the 
external interrupt enable bit in the core (MSR[EE]) and clears its CISR bit at the beginning 
of the interrupt routine, a lower priority interrupt can interrupt a higher one if the lower 
priority interrupt has higher priority than any other CISR bits that are currently set. 
Therefore, the interrupt service routine should clear its CISR bit at the end. 


35.5.5 CPM Interrupt Vector Register (CIVR) 


The CPM interrupt vector register (CIVR) is used to identify an interrupt source. The core 
uses the [ACK bit to acknowledge an interrupt. CIVR can be read at any time. 


0000_00000_0000_0000 


0x930 
Figure 35-5. CPM Interrupt Vector Register (CIVR) 





Table 35-4 describes CIVR fields. Section 35.6, “Interrupt Handler Example— 
Single-Event Interrupt Source,’ and Section 35.7, “Interrupt Handler Example— 
Multiple-Event Interrupt Source,’ show how CIVR fields are used. 


Table 35-4. CIVR Field Descriptions 


a 
Vector number. Identifies the interrupt source. These values are listed in Table 35-2. | 
S414 |— | Reserved. Writing to bits 5-15 has no effect because they are always read as zeros. 


15 IACK | Interrupt acknowledge. When the core sets [ACK, CIVR[VN] is updated with a 5-bit vector 

corresponding to the sub-block with the highest current priority. IACK is cleared after one clock cycle. 
35.6 Interrupt Handler Example—Single-Event 
Interrupt Source 


In this example, the CPIC hardware clears CIPR[PC6] during the interrupt acknowledge 

cycle. The following steps show how to handle an interrupt source without multiple events. 
1. Set CIVR[ITACK]. 

Read CIVR[VN] to determine the vector number for the interrupt handler. 

Handle the interrupt event indicated through the port C6 signal. 

Clear CISR[PC6]. 

Execute the rfi instruction. 












mn & W N 
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35.7 Interrupt Handler Example—Multiple-Event 
Interrupt Source 


In this example, CIPR[SCC2] remains set as long as one or more event bits remain 
unmasked in SCCE2. This is an example of a handler for an interrupt source with multiple 
events. Notice that the handler must clear the CISR bit but not the CIPR bit. 

Set the CIVR[IACK]. 

Read CIVR[VN] to determine the vector number for the interrupt handler. 


Immediately read the SCC2 event register into a temporary location. 


pe. ae a 


Decide which events in the SCCE2 must be handled and clear those bits as soon as 
possible. SCCE bits are cleared by writing ones. 


Handle the events in the SCC2 Rx BD or Tx BD tables. 
Clear CISR[SCC1]]. 


7. Execute the rfi instruction. If any unmasked SCCE1 bits remain (either not cleared 
by the software or set by the MPC850 during the execution of this handler), this 
interrupt source is pending again immediately after the rfi instruction. 


oy 
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Part VI 
System Debugging and Testing Support 





Intended Audience 
Part VI is intended for system designers who need to test and debug their MPC850 design. 


Contents 


Part VI describes how to use the MPC850 facilities for debugging and system testing. It 
contains the following chapters: 


e Chapter 36, “System Development and Debugging,’ describes support provided for 
program flow tracking, internal watchpoint and breakpoint generation, and 
emulation systems control. 

e Chapter 37, “IEEE 1149.1 Test Access Port,” describes the dedicated user-accessible 
test access port (TAP), which is fully compatible with the JEEE 1149.1 Standard Test 
Access Port and Boundary Scan Architecture. 


Suggested Reading 


This section lists additional reading that provides background for the information in this 
manual as well as general information about the PowerPC architecture. 


MPC8xx Documentation 


Supporting documentation for the MPC850 can be accessed through the world-wide web 
at http://www.motorola.com/SPS/RISC/netcomm. This documentation includes technical 
specifications, reference materials, and detailed applications notes. 





SOREERERESSOR LEER SESEESSSESSCOSEE SEES REECE SSE ISI I VERE GEL SPEEA SEES SSSI GSS ESE BESS S OSS EXER GE OSS PRESSOR RIB REORDER IAB SLES ESSERE SSS EES ESERIES 


MOTOROLA Part VI. System Debugging and Testing Support Part VI-i 


Part VI. System Debugging and Testing Support 





Conventions 

This document uses the following notational conventions: 

Bold entries in figures and tables showing registers and parameter 
RAM should be initialized by the user. 

mnemonics Instruction mnemonics are shown in lowercase bold. 

italics Italics indicate variable command parameters, for example, bectrx. 
Book titles in text are set in italics. 

Ox0 Prefix to denote hexadecimal number 

Ob0 Prefix to denote binary number 

REG[FIELD] Abbreviations or acronyms for registers or buffer descriptors are 


shown in uppercase text. Specific bits, fields, or numerical ranges 
appear in brackets. For example, MSR[LE] refers to the little-endian 
mode enable bit in the machine state register. 


Xx In certain contexts, such as in a signal encoding or a bit field, 
indicates a don’t care. 


n Indicates an undefined numerical value 


Acronyms and Abbreviations 


Table i contains acronyms and abbreviations used in this document. Note that the meanings 
for some acronyms (such as SDR1 and DSISR) are historical, and the words for which an 
acronym stands may not be intuitively obvious. 


Table xi. Acronyms and Abbreviated Terms 


[as __[vonntestacwn Gop SSCS 
a 
a 
fe 
























Testecneenon SSCS 
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Chapter 36 
System Development and Debugging 


Emulators require a level of control and observation that is in sharp contrast to the trend of 
modern microcomputers and microprocessors in which many bus cycles are directed to 
internal resources and are not externally visible. The same is true for bus analyzers. To help 
development tools support, some development support functions are implemented in the 
silicon. Program flow tracking, internal watchpoint and breakpoint generation, and 
emulation systems control over the activity of the core (debug mode) are some of the 
features that allow the user to efficiently debug MPC850-based systems. 


36.1 Tracking Program Flow 


The MPC850 provides many options for tracking program flows that impact performance 
in varying degrees. 


e Inone mode, signals provided for tracking code flow can be captured externally and 
then parsed by a post-processing program. This mode is described more fully in 
subsequent sections. 


e In another, slower mode, instruction flow is visible on the external bus when the 
MPC850 is programmed to operate in serialized mode with all fetch cycles shown 
on the external bus. Although instruction flow tracking is simpler, performance is 
much lower than in regular mode. Section 36.5.1.3, “Instruction Support Control 
Register ICTRL),’ describes programming of the core to operate in this mode. 


The MPC850 implements a prefetch queue combined with parallel, out-of-order, and 
pipelined execution. These features, plus the fact that most fetch cycles are performed 
internally (from the I-cache), increase performance but make it very difficult to provide the 
user with the real program trace. Instructions progress inside the core from fetch to 
retirement. An instruction retires from the machine only after it and all preceding 
instructions finish execution with no exception. Therefore, only retired instructions can be 
considered architecturally executed. : 


To reconstruct program trace, the program code, combined with additional MPC850 
information, is required. Reporting program trace during retirement significantly 
complicates the implementation in two ways: more than one instruction can retire in a clock 
cycle; and, it is harder to report on indirect branches during retirement. Because of this, 
program trace is deciphered by monitoring fetched code and instruction queue flushes, and 
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using this information to reconstruct which instructions actually reach retirement. 
Instructions are fetched sequentially until branches (direct or indirect), exceptions or 
interrupts appear in the program flow or until a stall in execution forces the machine to 
avoid fetching the next address. These instructions may be architecturally executed or they 
may be canceled in some stage of the machine pipeline. 


The information required to enable reconstruction of program trace includes: 


¢ A description of the last fetched instruction (stall, sequential, branch not taken, 
branch direct taken, branch indirect taken, interrupt/exception taken). 


e The addresses of the targets of all indirect flow changes. Indirect flow changes 
include all branches using the link and count registers as the target address, all 
interrupts/exceptions, and rfi and mtmsr ECHR they may cause context 
switches). 


e The number of instructions canceled on each clock. 


The following sections define how this information is generated and how it should be used 
to reconstruct the program trace. 


36.1.1 Program Trace Functional Description 


To make the events that occur in the machine visible, a few dedicated pins are used. Also, 
a special bus cycle attribute called program trace cycle is defined. The program trace cycle 
attribute is attached to all fetch cycles resulting from indirect flow changes. When program 
trace recording is required, the user can ensure these cycles are visible on the external bus. 


The core can be forced to show all fetch cycles marked with the program trace cycle 
attribute either by setting TECR[VSYNC] of the development port or by programming 
ISCT_SER in the instruction support control register (ICTRL). For more information on 
VSYNC see Section 36.3.2, “Development Port Communication.” Both states described 
here are subsequently referred to as VSYNC state. 


The VSYNC state forces all fetch cycles marked with the program trace cycle attribute to 
be visible on the external bus, even if their data is found in one of the internal devices. To 
enable the external hardware to properly synchronize with the internal activity of the core, 
entering VSYNC state forces the machine to synchronize and the first fetch after this 
synchronization to be marked as a program trace cycle and be seen on the external bus. 


In VSYNC state, fetch cycles marked with the program trace cycle attribute become visible 
on the external bus. These cycles generate regular bus cycles when the instructions reside 
in an external device or generate address-only cycles when instructions are in internal 
devices (I-cache and internal memory). In VSYNC state, performance degrades because of 
the additional external bus cycles. However, this degradation is very small. 


Note that program trace functions are not available when operating the MPC850 in 
half-speed bus mode (when SCCR[EBDF] = 0b01). The VFLS[0-1] signals are not valid 
in half-speed bus mode. 
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36.1.2 Instruction Fetch Show Cycle Control 


Instruction fetch show cycles are controlled by ICTRL[ISCT_SER] and the state of 
VSYNC. Table 36-1 defines the level of fetch show cycles generated by the core. 


Table 36-1. Fetch Show Cycles Control 


VSYNC | ICTRL[ISCT_SER] Instruction Fetch Show Cycle Control Bits Show Cycles Generated 


X X01 | All change of flow (direct and 
indirect) 


X X10—Enable STS functionality of OP2/MODCK1/STS by writing All indirect change of flow 
10 or 11 to SUUMCR[DBGC]. The external bus address should be 


sampled only when STS is asserted. 
No show cycles are performed 


OC 


A cycle marked with the program trace cycle attribute is generated when entering and 
exiting VSYNC state by setting TECR[VSYNC]. 
























36.1.3 Program Trace Signals 


Note that if the MPC850 is in half-speed bus mode (SCCR[EBDF] = 0b01), the VF and 
VELS pins do not report fetch and flush information for the program trace capability. 
However, the internal freeze state of the processor is reported in the VFLS pins as it does 
in full-speed bus mode. The status pins are divided into two groups, shown in Table 36-2. 


Tabie 36-2. Status Pin Groupings 


es 


VF [0-2] _| Instruction queue status. Denotes the type of the last fetched instruction or how many instructions were 
flushed from the instruction queue. VF [0-2] are used for both functions because queue flushes occur 

only in clocks in which no fetch type information is reported. Table 36-3 defines instruction queue 
flushes and Table 36-4 defines instruction fetch types. 












VFLS [0-1] | History buffer flushes status: indicates the number of instructions that are flushed from the history buffer 
on this clock. Possible values are as follows: 

00 None 

01 1 instruction was flushed from the history buffer 

10 2 instructions were flushed from the history buffer 

11 Used for debug mode indication. Should be ignored by the program trace external hardware. See 


Section 36.3.1, “Debug Mode Operation.” 










Table 36-3 describes possible instruction queue flushes as they are identified by VF 
encodings. 
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Table 36-3. VF Pins Encoding: Instruction Queue Flushes 


000 pNoe Instruction type information 
001 | One instruction was flushed from the instruction queue Instruction type information 
0 Instruction type information 


wal, 


Three instructions were flushed from the instruction Instruction type information 
queue 


0 | Four instructions were flushed from the instruction queue | Instruction type information 


Five instructions were flushed from the instruction queue Instruction type information 


Ei : 
oO hk 
—s 


o_o 


| 10 





= 
° 


Reserved Instruction type information 


111 See VF = 06111 entry in Table 36-4 _ 


Table 36-4 describes instruction types as they are identified by VF encodings. 
Table 36-4. VF Pins Encoding: Instruction Fetch Types 


| Instruction Type VF Next Clock Holds 
| equentia 


1 
















El 
Ti | 






© 






© 
813 
pr 


Branch (direct or indirect) not taken | 





Oo }] © 
— 
— | © 


This instruction is marked with the program trace cycle attribute in response to 
| changing the state of TECR[VSYNC] in the development port. 











Queue flush 


ycle attribute 
information? 


| 100 | Interrupt/exception taken, the target is marked with the program trace c 










Branch indirect taken, rfi, mtmsr, isync and in some cases mtspr, the target is 
marked with the program trace cycle attribute’ 


| 410 | Branch direct taken 
Branch (direct or indirect) not taken | 


' See Section 36.1.4.3, “Sequential Instructions Marked as Indirect Branch.” 
2 Unless the next clock VF = 111, see Section 36.1.4.1, “Queue Flush Information Special Case.” 


101 








36.1.4 Program Trace Special Cases 


The following sections describe special cases of program trace implemented on the 
MPC850. 


36.1.4.1 Queue Flush Information Special Case 


There is one special case where the queue flush information is expected on the VF pins after 
an instruction fetch encoding of VF = Ob1xx. This case is where an instruction-type VF 
indications of b1xx is followed by an indication of VF = 0b111. THis indication of VF = 
Obi111 should be interpreted as an instruction fetch type encoding, as described by 
_ Table 36-4. This is easily monitored since the only case where this can happen is when VF 
= 111 and the maximum number of possible queue flushes is five. 
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36.1.4.2 Program Trace When In Debug Mode 


When entering debug mode an interrupt/exception taken is reported on the VF pins (VF = 
0b100) and a cycle marked with the program trace cycle is made externally visible. When 
the core is in debug mode, VF = 0b000 and VFLS = 0b11. For more information on debug 
mode, see Section 36.3, “Development System Interface.” 


If TECR[VSYNC] is set or cleared while the core is in debug mode, this information is 
reported when the first VF pins report as the core returns to regular mode. If VSYNC was 
not changed while in debug mode, the first VF pins report will be encoded as VF = Ob101 
(indirect branch) due to the rfi instruction that is being issued. In both cases, the first 
instruction fetch after debug mode is marked with the program trace cycle attribute and is 
externally visible. 


36.1.4.3 Sequential Instructions Marked as Indirect Branch 


There are instances where non-branch (sequential) instructions can affect the machine in a 
manner similar to indirect branch instructions. These instructions include rfi, mtmsr, isync, 
and mtspr to registers CMPA—CMPF, ICTRL, ICR, and DER. 


The core marks these instructions are marked as indirect branch instructions (VF = 0b101). 
The next instruction address is marked with the program trace cycle attribute, as if it were 
an indirect branch target. Therefore, when one of these special instructions is detected in 
the core, the address of the next instruction is externally visible. The reconstructing 
software can now correctly evaluate the effect of these instructions. 


36.1.5 Reconstructing Program Trace 


When program trace is needed, external hardware must sample the status pins (VF and 
VFLS) of every clock and mark the address of all cycles with the program trace cycle 
attribute. Although program trace can be used in various ways, the following describes only 
back trace and window trace. 


36.1.5.1 Back Trace 


Back trace is useful when a record of the program trace before an event occurred is needed. 
An example of such an event is a system failure. If back trace is needed, external hardware 
should start sampling VF and VFLS and the address of all cycles marked with the program 
trace cycle attribute immediately after reset is negated. 


At reset, cycles marked with the program trace cycle attribute are visible on the external bus 
(that is, the instruction fetch show cycle/core serialize control field TCTRL[ISCT_SER]) 
is Cleared at reset). To avoid this slower default mode, it is recommended that the user enters 
VSYNC state as described in Section 36.1.1, “Program Trace Functional Description.” To 
exit VSYNC state after a particular event, either trap in debug mode and trigger the freeze 
indication or follow the method described in Section 36.1.1, “Program Trace Functional 
Description.” After exiting VSYNC state, the trace buffer holds the trace of the program 
executed before the pertinent event occurred. 
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36.1.5.2 Window Trace 


Window trace is useful when a record of the program trace between two events is needed, 
in which case, VSYNC state should be entered between these two events. After exiting 
VSYNC state, the trace buffer holds trace information for the program executed between 
the two events. | 


36.1.5.2.1 Synchronizing the Trace Window to Internal Core Events. 


The assertion/ negation of VSYNC is accomplished using the serial interface implemented 
in the development port. To synchronize the assertion/negation of VSYNC to an internal 
event of the core, it is possible to use the internal breakpoints hardware with the debug 
mode. This method is available only when debug mode is enabled. For more information 
on debug mode, see Section 36.3, “Development System Interface.” 


The following is a possible set of steps that enable the user to synchronize the trace window 
to the internal core events: 
1. Enter debug mode, either immediately out of reset or using the debug mode request. 


2. Program hardware to break on the event that marks the start of the trace window 
using the registers defined in Section 36.2, “Watchpoints and Breakpoints Support.” 


3. Enable debug mode entry for the breakpoint programmed in the DER (see 
Table 36-25). | 


4. Return to the regular code run (refer to Section 36.3.1.7, “Exiting Debug Mode’). 


5. The hardware generates a breakpoint when the event in question is detected and the 
machine enters debug mode (refer to Section 36.3.1.2, “Entering Debug Mode’). 


6. Program the hardware to break on the event that marks the end of the trace window. 
7. Assert VSYNC. 


8. Return to the regular code run. The first report on the VF pins is VSYNC (VF = 
Ob011). 


9. The external hardware starts sampling the program trace information after the VF 
pins indicate VSYNC. 


10. The hardware generates a breakpoint when the event in question is detected and the 
machine enters debug mode. 


11.Negate VSYNC. 


12.Return to the regular code run (issue an rfi). The first encoding on the VF pins is 
VSYNC (VE = 0b011). 


13.External hardware stops sampling the program trace information after recognizing 
VSYNC on the VF pins. 


36.1.5.3 Detecting the Trace Window Start Address 


When using back trace, latching of VF, VFLS, and the address of the cycles marked 
program trace cycle should all start immediately after the negation of reset. The start 
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address is the first address in the program trace cycle buffer. When using window trace, 
latching of VF, VFLS, and the address of the cycles marked as program trace cycle should 
all start immediately after the first VSYNC is recognized on the VF pins. The start address 
of the trace window should be calculated according to the first two VF pin reports. Assume 
VF1 and VF2 are the first two VF pin reports and T1 and T2 are the two addresses of the 
first two cycles marked with the program trace cycle attribute that were latched in the trace 
buffer. Use Table 36-5 to calculate the trace window start address. 


Table 36-5. Detecting the Trace Buffer Start Point 


011 001 T1 VSYNC asserted. Followed by a sequential instruction. 

VSYNC Sequential The start address is T1. 

011 110 T1-4+ VSYNC asserted. Followed by a taken direct branch. 

VSYNC Branch direct taken Offset(T1 - 4) The start address is the target of the direct branch. 

011 101 T2 VSYNC asserted. Followed by a taken indirect branch. 

VSYNC Branch indirect taken The start address is the target of the indirect branch. 
36.1.5.4 Detecting the Assertion/Negation of VSYNC 


Since the VF pins are used for reporting both instruction type and queue flush information, 
the external hardware must take special care when trying to detect entry and exit of the 
VSYNC state. When VF = 0b011, it is a VSYNC entry or exit report only if the prior value 
of VF was 0b000, Ob001, or 06010. 
















36.1.5.5 Detecting the Trace Window End Address 


The information on the status pins that describes the last fetched instruction and last 
queue/history buffer flush, changes every clock. Cycles marked as program trace cycle are 
generated on the external bus only when the system interface unit (SIU) arbitrates over the 
external bus. Therefore, there is a delay between when a program trace cycle is reported as 
performed and the time that this cycle can be detected on the external bus. 


When the user exits VS YNC state (through the serial interface of the development port), the 
core delays the report of VS YNC occurring on the VF pins until all addresses marked with 
the program trace cycle attribute are externally visible. Therefore, the external hardware 
should stop sampling VF, VFLS, and the address of the cycles marked as program trace 
cycle immediately after VF = VSYNC. The last two instructions reported on the VF pins 
are not always valid and should be ignored. 


36.1.5.6 Efficient Trace Information Capture 


To store all information generated on the pins during program trace (5 bits per clock + 30 
bits per show cycle) a large memory buffer is required. However, because this information 
includes events that were canceled, some of this information can be discarded. External 
hardware can be added to eliminate all canceled instructions and report only on taken/not 
taken branches, indirect flow change, and the number of sequential instructions after the 
last flow change. 
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36.2 Watchpoints and Breakpoints Support 


Watchpoints, when detected, are reported to the external world (on dedicated pins), but do 
not change the timing and flow of the machine. Breakpoints, when detected, force the 
machine to branch to the appropriate exception handler. The core supports watchpoints 
generated inside the core and breakpoints generated inside and outside the core. 


Internal watchpoints are generated when a user-programmable set of conditions are met. 
Internal breakpoints can be programmed to be generated either as an immediate result of 
the assertion of one of the internal watchpoints or after an internal watchpoint is asserted 
for user-programmable times. Programming a certain internal watchpoint to generate an 
internal breakpoint can be done either in software, by setting the corresponding software 
trap enable bit or on-the-fly using the serial interface implemented in the development port 
to set the corresponding trap enable bit. External breakpoints can be generated by 
peripherals of the system outside of the MPC850 such as an external development system. 
Peripherals on the external bus use the serial interface of the development port to assert the 
external breakpoint. 


In the core, as in other RISC processors, software saves and restores machine state as part 
of exception handling. As software saves/restores the machine state, MSR[RI] is cleared. 
Exceptions that occur are handled by the core when MSR[RI] is clear and they result in a 
nonrestartable machine state. See Section 6.1.5, “Recoverability after an Exception.” 


In general, the core recognizes breakpoints only if MSR[RI] = 1, which guarantees machine 
restartability after a breakpoint. In this working mode, breakpoints are said to be masked. 
Sometimes it is preferable to enable breakpoints when MSR[RI] is clear, despite the risk of 
a nonrestartable machine state. Internal breakpoints also have a programmable nonmasked 
mode, and an external development system can choose to assert a nonmaskable external 
breakpoint. Watchpoints are not masked and are always reported on external pins, 
regardless of the value of MSR[RI]. Although they count watchpoints, counters are part of 
the internal breakpoint logic and are not decremented when the core operates in masked 
mode and MSR[RI] = 0. Figure 36-1 shows the core’s watchpoint and breakpoint support. 
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36.2.1 Key Features 


The following list summarizes features of the internal watchpoints and breakpoints support. 


¢ Four I-address comparators supporting equal, not equal, greater than, and less than. 


¢ Two L-address comparators supporting equal, not equal, greater than, and less than. 
Includes Isb masking, according to the size of the bus cycle for the byte and 
half-word working modes. See Section 36.2.4.2, “Byte and Half Word Working 
Modes.” 


¢ ‘Two L-data comparators supporting equal, not equal, greater than, and less than. 
Includes byte, half-word, and word operating modes, and four byte mask bits for 
each comparator. It can be used for integer data. A match is detected only on the 
valid part of the data bus (according to the cycle’s size and the two address Isbs). 





¢ No internal breakpoint/watchpoint support for unaligned words and half words. 
e [-data comparators can be programmed to treat integers as signed or unsigned. 


¢ Combined comparator pairs to detect in and out of range conditions, including either 
signed or unsigned values on the L-data. 
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° A programmable AND-OR logic structure between the four instruction comparators 
results in five outputs, four instruction watchpoints, and one instruction breakpoint. 


¢ A programmable AND-OR logic structure between the four instruction watchpoints 
and the four load/store comparators results in three outputs, two load/store _ 
watchpoints, and one load/store breakpoint. 


e Five watchpoint pins, three for instructions and two for loads/stores. 


¢ Two dedicated 16-bit down counters. Each can count either an instruction 
watchpoint or load/store watchpoint. Only architecturally executed events are 
counted (count up is performed in case of recovery). 


e On-the-fly trap enable programming of the different internal breakpoints using the 
development port serial interface (see Section 36.3.2, “Development Port 
Communication”). Software control is also available. 


e Watchpoints do not change the timing of the machine. 
e Internal breakpoints and watchpoints are detected on the instruction during fetch. 


e Internal breakpoints and watchpoints are detected on the load/store during load/store 
bus cycles. 


e Instruction and load/store breakpoints and watchpoints are handled on retirement 
and then reported. 


¢ Breakpoints and watchpoints on recovered instructions (due to exceptions or missed 
predictions) are not reported and do not change the machine’s timing. 


e Instructions with instruction breakpoints are not executed. The machine branches to 
the breakpoint exception routine before it executes the instruction. 


e Instructions with load/store breakpoints are executed. The machine branches to the 
breakpoint exception routine after it executes the instruction. The address of the 
access is placed in the BAR. 


e Load/store multiple/string instructions with load/store breakpoints finish execution 
before the machine branches to the breakpoint exception routine. 


e Load/store data compare is accomplished on the load/store, after swap in store 
accesses and before swap in load accesses (as the data appears on the bus). 


e Internal breakpoints may operate either in masked mode or in nonmasked mode. 


e “Go to x” and “continue” working modes are supported for instruction breakpoints. 


36.2.2 Internal Watchpoints and Breakpoints Logic 
Internal breakpoint and watchpoint support is based on the following: 





e Eight comparators comparing information on instruction and load/store cycles 
¢ Two counters 
e Two AND-OR logic structures 





36-10 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part VI. Debug and Test 


Comparators perform compare on the instruction address (I-address), the load/store address 
(L-address), and the load/store data (L-data) and can detect the following conditions: 


e Equal to 
e Not equal to 
e Greater than 


e Less than 


Greater-than-or-equal-to and less-than-or-equal-to are easily obtained from these four 
conditions. See Section 36.2.4.5, “Generating Six Compare Types.’ Using the AND-OR 
logic structures “in range” and “out of range” detections (on address and data) are 
supported. The counters can be used to program a breakpoint to be recognized after an event 
is detected a predefined number of times. 


The L-data comparators operate on load or store integer data. When operating on integer 
data, L-data comparators perform comparisons on bytes, half-words, and words, treating 
numbers as signed or unsigned. Comparators generate match events, then instruction match 
events enter the instruction AND-OR logic where instruction watchpoints and breakpoints 
are generated. An asserted instruction watchpoint can generate an instruction breakpoint. 
Two different events can decrement one counter. When a counter on an instruction 
watchpoint expires, the instruction breakpoint is asserted. 


Instruction watchpoints and load/store match events on address/data enter the load/store 
AND-OR logic where load/store watchpoints and breakpoints are generated. Load/store 
watchpoints (when asserted) can generate the load/store breakpoint or decrement a counter. 
When a counter on one load/store watchpoint expires, the load/store breakpoint is asserted. 


Watchpoints progress in the machine and are reported on retirement. Internal breakpoints 
progress in the machine until they reach the top of the history buffer, at which point the 
machine branches to the breakpoint exception vector. To allow use of breakpoint features 
without restricting software, the address of the load/store cycle that generated the load/store 
breakpoint is not stored in the data address register (DAR). In a load/store breakpoint, the 
address of the load/store cycle that generated the breakpoint is stored in the breakpoint 
address register (BAR). 


For more information, see Section 36.3, “Development System Interface.” 


36.2.3 Functional Description 
The following sections describe instruction and load/store watchpoint generation in detail. 


36.2.3.1 Instruction Support Detailed Description 

Each of the four instruction address comparators (A—D), shown in Figure 36-2, is 30 bits 
long and generates two output signals —equal and less than. These signals generate one of 
four events —equal, not equal, greater than, or less than. The instruction watchpoints and 





MOTOROLA Chapter 36. System Development and Debugging 36-11 





Part Vi. Debug and Test 


breakpoint are generated using these events according to the user programming. Using the 
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Figure 36-2. Instruction Support General Structure 
Table 36-6 shows instruction watchpoint programming options. 


Table 36-6. Instruction Watchpoints Programming Options 


Description Programming Options 


First instruction watchpoint Comparator A 
Comparators (A & B) 


Second instruction watchpoint Comparator B 
Comparator (A|B 


) 
Third instruction watchpoint Comparator C 
Comparators (C & D) 


Fourth instruction watchpoint Comparator D 
Comparator (C | D) 





36.2.3.2 Load/Store Support Detailed Description 


Each of the two load/store address comparators (E and F) compares the 32 address bits and 
the cycle’s attributes (read/write). The two lsbs are masked when a word is accessed; the 
Isb is masked when a half word is accessed. As shown in Figure 36-3, each comparator 
generates two output signals—equal and less than. These signals generate one of four 
events from each comparator—equal, not equal, greater than, or less than. See 
Section 36.2.4.2, “Byte and Half Word Working Modes.” 
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Figure 36-3. Load/Store Support General Structure 


Each of the two load/store data comparators (G and H) is 32 bits wide and can be 
programmed to treat numbers as signed or unsigned. Each data comparator operates as four 
independent byte comparators. Each byte comparator has a mask bit and generates two 
output signals—equal and less than (if the mask bit is not set.) Therefore, each 32-bit 
comparator has eight output signals. These signals generate the equal and less-than signals 
according to the compare size programmed by the user (byte, half-word, word). All signals 
are significant in byte mode. In half-word mode, only four signals from each 32-bit 
comparator are significant; when operating in word mode, only two signals are significant. 


One of the next four match events is generated by the equal and less-than signals —equal, 
not equal, greater than, or less than, depending on the compare type programmed. 
Therefore, from the two 32-bit comparators, eight match indications are generated— 
Gmatch[0-—3] and Hmatch[0—3]. According to the lower bits of the address and the size of 
the cycle, only match indications detected on bytes with valid information are validated. 
The rest are negated. If the executed cycle has a smaller size than the compare size (a byte 
access when the compare size is word or half-word), no match indication is asserted. The 
match indication signals generate four load/store data events as shown in Table 36-7. 
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Table 36-7. Load/Store Data Events 


: 7 Event Function (see note) 
(Gmatcho | Gmatch1 | Gmatch2 | Gmatch3) . 
PHO (Hmatcho | Hmatch1 | Hmatche | Hmatch3) . 


(G& H)' ((GmatchO & Hmatch0) | (Gmatch1 & Hmatch1) | (Gmatch2 & Hmatch2) | (Gmatch3 & Hmatch3)) 
(GIH)" ((GmatchO | Hmatch0) | (Gmatch1 | Hmatch1) | (Gmatch2 | Hmatch2) | (Gmatch3 | Hmatch3)) 


1 & denotes a logical AND. | denotes a logical OR. 
















The four load/store data events, combined with the match events of the load/store address 
comparators and the instruction watchpoints, are used to generate the load/store 
watchpoints and breakpoint according to the user’s programming. 


Table 36-8. Load/Store Watchpoints Programming Options 


Description Instruction Events L-Address Events L-Data Events 
P Programming Options Programming Options | Programming Options 
LWO 


First load/store Iwo, IW1, IW2, IW3, Comparator E Comparator G 

watchpoint ignore instruction Comparator F Comparator H 

. events Comparators (E & F) Comparators (G & H) 
Comparators (E | F) Comparators (G | H) 


Ignore L-address events Ignore L-data events 


| Second IWO, IW1, IW2, IWS, Comparator E Comparator G 
load/store ignore instruction Comparator F Comparator H 
watchpoint events Comparators (E & F) Comparators (G & H) 

Comparators (E | F) Comparators (G | H) 
Ignore l-address events Ignore L-data events 





When programming load/store watchpoints to ignore L-addr events and L-data events, the 
instruction must be a load/store instruction for the load/store watchpoint event to trigger. 


36.2.3.3 The Counters 


Each of the two 16-bit down counters can count an instruction watchpoint or a load/store 
watchpoint. Both generate the corresponding breakpoint when they reach zero. In masked 
mode, counters do not count detected watchpoints when MSR[RI] = 0. See 
Section 36.2.4.3, “Context Dependent Filter’’ Counter values are not predictable if they 
count watchpoints programmed on instructions that alter counters directly. Readings from 
the counters when active must be synchronized by inserting a sync instruction before the 
read. 


Note that when programmed to count instruction watchpoints, the last instruction that 
decrements the counter to zero is treated like any other instruction breakpoint in that it is 
not executed before the machine branches to the breakpoint exception routine. As a side 
effect of this behavior, the value of the counter inside the breakpoint exception routine 
equals one and not zero, as one might expect. When programmed to count load/store 
watchpoints, the last instruction that decrements the counter to zero is treated like any other 
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load/store breakpoint in that it executes before the machine branches to the breakpoint 
exception routine. Therefore, the value of the counter inside the breakpoint exception 
routine equals zero. 


36.2.3.4 Trap Enable Programming 


The trap enable bits can be programmed by regular software (only if MSR[PR] = 0) using 
the mtspr instruction or on-the-fly using the special development port interface. See 
Section 36.3.2.4, “Development Port Serial Communications—Trap Enable Mode.” The 
value used by the breakpoint generation logic is the bit-wise OR of the software trap enable 
bits written using the mtspr instruction, and the development port trap enable bits that are 
serially shifted using the development port. The software trap enable bits and development 
port trap enable bits can be read from ICTRL and the LCTRL2 using the mtspr instruction. 
Table 36-20 and Table 36-22 show the exact bit placement. 


36.2.4 Operation Details 


The following sections describe various operating details of watchpoint and breakpoint. 


36.2.4.1 Restrictions 


The same watchpoint can be detected more than once during execution of an instruction. 
For example, a load/store watchpoint can be detected on more than one transfer when 
executing load/store multiple/string instructions or a load/store watchpoint can be detected 
on more than one byte in byte mode. In such cases only one watchpoint of a given type is 
reported for the instruction. Similarly, only one watchpoint of the same type can be counted 
for a single instruction. Watchpoint events are reported when the instruction that caused the 
event retires; because more than one instruction can retire in a single clock, ensuing events 
may be reported in the same clock. Moreover, an event detected on more than one 
instruction (tight loops or range detection) can only be reported once. Internal counters 
count correctly in these cases. 


36.2.4.2 Byte and Half Word Working Modes 


The user can use watchpoints and breakpoints to detect matches on bytes and half words 
when the byte/half word is accessed in a load/store instruction of larger data widths. For 
example, when loading a table of bytes using a series of load word instructions.) To use this 
feature in word mode, write the required match value to the correct half word of the data 
comparator and the mask in the L-data comparator. To break on bytes, the byte mask for 
each L-comparator and the bytes to be matched must be written in the data comparator. 


Because bytes and half words can be accessed using a larger data width instruction, the user 
cannot predict the exact value of the L-address lines when the requested byte/half-word is 
accessed. If the matched byte is byte 2 of the word and accessed using a load word 
instruction, the L-address value will be of the word (byte 0). Therefore, the core masks the 
two Isbs of the L-address comparators for word accesses and the Isb for half-word accesses. 
Address range is supported only when aligned according to access size. 
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36.2.4.2.1 Examples 
The following examples show programming options for several search criteria: 
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Example 1 


Looking for: 

Data size: Byte. 

Address: 0x00000003. 

Data value: Greater than 0x07 and less than Ox0C. 


Programming options: 


One L-address comparator = 0x00000003 and program for equal. 

One L-data comparator = 0x00000007 and program for greater than. 

One L-data comparator = OxOOOO000C and program for less than. 

Both byte masks = OXE. 

Both L-data comparators program to byte mode. 

Result: The event will be correctly detected, regardless of the load/store instruction 
the compiler chooses for this access. 


Example 2 


Looking for: 

Data size: Half-word. 

Address: Greater than 0x00000000 and less than OxOOOO000C. 
Data value: Greater than 0x4E204E20 and less than 0x9C409C40. 


Programming option: 

One L-address comparator = 0x00000000 and program for greater than. 

One L-address comparator = OxOOOOOO0C and program for less than. 

One L-data comparator = 0x4E204E20 and program for greater than. 

One L-data comparator = 0x9C409C40 and program for less than. 

Both byte masks = 0x0. 

Both L-data comparators program to half-word mode. 

Result: The event will be correctly detected as long as the compiler does not use a. 
load/store instruction with data size of byte. 


Example 3 


Looking for: 

Data size: Half-word. 

Address: Greater than or equal to 0Ox00000002 and less than OxOOOQO00E. 
Data value: Greater than Ox4E204E20 and less than 0x9C409C40. 


Programming option: 

One L-address comparator = 0x00000001 and program for greater than. 
One L-address comparator = OxOOOOOOOE and program for less than. 
One L-data comparator = Ox4E204E20 and program for greater than. 
One L-data comparator = 0x9C409C40 and program for less than. 

Both byte masks = 0x0. 7 

Both L-data comparators program to half-word or word mode. 
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Result: An event is correctly detected if the compiler chooses a load/store instruction 
with data size of half-word. If the compiler chooses load/store instructions with data 
size greater than half-word (word, multiple), false detections may occur. 


e These can only be ignored by the software that handles the breakpoints. Figure 36-4 
shows this partially supported scenario: 


Possible false detect on these half-words when using werd/multiple 
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Figure 36-4. Partially Supported Watchpoints/Breakpoint Example 






36.2.4.3 Context Dependent Filter 


The core can be programmed to recognize only internal breakpoints when MSR[RI]J = 1 
(maskable mode) or to always recognize internal breakpoints (nonmaskable mode). 


In maskable mode, when the core is programmed only to recognize internal breakpoints 
(when MSR[RI] =1), it is possible to debug all parts of the code, except when SRRO and 
SRR1, DAR, and DSISR are busy as indicated by MSR[RI] = 0 (Gin the prologues and 
epilogues of exception handlers). Internal breakpoints detected when MSR[RI] = 0 are lost 
and debug counters do not count detected watchpoints. Detected watchpoints are always 
reported on the external pins, regardless of the value of MSR[RI]. 


In nonmaskable mode, when the core is programmed to recognize internal breakpoints, all 
parts of the code can be debugged. However, if an internal breakpoint is recognized when 
MSR[RI] = 0 (SRRO and SRR1I are busy), the machine enters a nonrestartable state. See 
Section 6.1.5, “Recoverability after an Exception.” 


The core defaults to maskable mode after reset. The core is put in nonmaskable mode by 
setting LCTRL2[BRKNOMSK], which controls all internal I- and L-breakpoints. See 
Section 36.5.1.5, “Load/Store Support AND-OR Control Register (LCTRL2).” 


36.2.4.4 Ignore First Match 


The ignore first match bit, ICTRL[IFM], facilitates the debugger’s “continue” and “go from 
x” utilities for instruction breakpoints. When an instruction breakpoint is first enabled, the 
first instruction cannot cause an instruction breakpoint if ICTRL[IFM] = 1. This is used for 
“continue” utilities. If IFM = 0, every matched instruction causes an instruction breakpoint. 
This is used for “go from x”. IFM is set by software and cleared by hardware; after the first 
instruction breakpoint, the match is ignored. Load/store breakpoints and _ all 
counter-generated breakpoints (instruction and load/store) are unaffected by this mode. 
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36.2.4.5 Generating Six Compare Types 


The four compare types (equal, not equal, greater than, and less than) can be used to 
generate two additional compare types — greater than or equal to and less than or equal to. 
The greater-than-or-equal compare type can be generated by using the greater-than 
compare type and programming the comparator to the value in question minus 1. Likewise, 
the less-than-or-equal compare type can be generated by using the less-than compare type 
and programming the comparator to the value in question plus 1. This does not work for the 
following boundary cases: 


¢ Less than or equal of the largest unsigned number (1111...1). 

¢ Greater than or equal of the smallest unsigned number (O000...0). 

¢ Less than or equal of the maximum positive number in signed mode (O111...1). 

¢ Greater than or equal of the maximum negative number in signed mode (1000...). 
These boundary cases do not require special support because they are considered always 
true. They can be programmed using the ignore option of the load/store watchpoint 


programming. See Section 36.5.1.5, “Load/Store Support AND-OR Control Register 
(LCTRL2).” 


36.2.5 Load/Store Breakpoint Example 
CMPE and CMPFEF are used for load/store addresses while CMPG and CMPH are used for 
load/store data. | 
The procedure is as follows: 
1. Write the value in the appropriate comparator register, CMPE, CMPF, CMPG, or 
CMPH. 


2. For load/store data, program the operand size in LCTRL1[CSx] and the byte mask 
in LCTRL1[CxBMSK]. 


3. Write the comparison type in LCTRL1[CTx]. For load/store data, program whether 
the operand is signed or unsigned LCTRLI[SUSx]. 


4. Select a watchpoint enable event: 
— Define the load/store watchpoint event in LCTRL2[LWxLA] or 


LCTRL2[LWxLD] 
— Enable the address or data event in LCTRL2[LWxLADC] or 
LCTRL2[LWxLDDC] 
5. Disable instruction events affecting load/store watchpoints — Clear LWxIADC 
(LWxIA is a don’t care). 


6. Enable the watchpoint in LCTRL2[LWxEN]. 


7. Enable a trap on every watchpoint or every N watchpoints. 
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Option: Enable trap on every load/store watchpoint in LCTRL2[SLWxXEN] or on 
every N watchpoints in COUNTx. (Set CNTV to n and select the load/store 
watchpoint in CNTC). 


8. Select whether breakpoints are maskable or nonmaskable in 
LCTRL2[,BRKNOMSK]. 


9. Optionally select whether a load/store trap causes the debug mode to be entered in 
DER[LBRKE]. 


36.3 Development System Interface 


It is often useful to debug a target system without making changes. However, sometimes it 
is impossible to add load to the lines connected to the existing system without disrupting 
its Operation. The development system interface of the core enables debug of a target 
system with minimal cost and intrusiveness. 


The development system interface of the core uses the development port, which is a 
dedicated serial port and, therefore, does not need any of the regular system interfaces. 


The development port is a relatively inexpensive interface that allows a development 
system to operate in a lower frequency than the core’s frequency and controls system 
activity when the core is in debug mode. It is also possible to debug the core using monitor 
debugger software, described in Section 36.4, “Software Monitor Debugger Support.” 


In debug mode the core fetches all instructions from the development port; data can be read 
from the development port and written to the development port. This allows memory and 
registers to be read and modified by a development tool (emulator) connected to the 
development port. For protection, two possible working modes are defined—debug mode 
enable and debug mode disable, described in Section 36.3.1.1, “Debug Mode Enable vs. 
Debug Mode Disable,’ are selected only during reset. 


The user can work in debug mode directly out of reset or the core can be programmed to 
enter debug mode as a result of a predefined sequence of events. These events can be any 
interrupt or exception in the core system, including the internal breakpoints, in combination 
with two levels of development port requests generated externally. Each of these can be 
programmed to be treated as a regular interrupt that causes the machine to branch to its 
interrupt vector or as a special interrupt that causes debug mode entry. In debug mode, the 
rfi instruction returns the machine to its regular work mode. Figure 36-5 shows the 
relationship between debug mode logic and the rest of the core. 
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Figure 36-5. Functional Diagram of the MPC850 Debug Mode Support 
The development port provides a full duplex serial interface for communications between 


the internal development support logic of the core and an external development tool. The 
development port can operate in two working modes-trap enable mode and debug mode. 


Trap enable mode shifts the following control signals into the core internal development 
support logic. 
¢ Instruction trap enable bits for programming the instruction breakpoint dynamically. 
¢ lLoad/store trap enable bits for programming the load/store breakpoint dynamically. 
¢ Nonmaskable breakpoint is used to assert the nonmaskable external breakpoint. 
e Maskable breakpoint is used to assert the maskable external breakpoint. 
* WVSYNC control code is used to assert and negate VSYNC operation. 


In debug mode, the development port also controls the debug mode features of the core. See 
Section 36.3.2, “Development Port Communication.” 
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36.3.1 Debug Mode Operation 


Figure 36-6 shows the debug mode logic implemented in the core. 


Decoder Event Int t 
| Davoren eh Ev Gee nr 
Interrupt Cause Register (ICR) 


7 Debug Enable Register (DER) i 


Event Valid 





RFI 


Reset Set 


Freeze 


Q 
a FOF 
Debug Mode Enable > 


Wiode Signal? 


Figure 36-6. Debug Mode Logic Diagram 


The debug mode of the core provides the development system with the following functions: 


Controls and maintains execution of the processor in all circumstances. The 
development port can force the core to enter debug mode even when external 
interrupts are disabled. 


Debug mode can be entered immediately out of reset, allowing the user to debug a 
system without using ROM. 


The debug enable register (DER) can be used to selectively enable events that cause 
the machine to enter debug mode. 


The interrupt cause register (ICR) indicates why debug mode is entered. 


After entry into debug mode, program execution continues from the where debug 
mode was entered. 


All instructions are fetched from the development port, while load/store accesses are 
performed on the real system memory in debug. 
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e A simple method is provided for memory dump and load via the data register of the 
development port that is accessed with mtspr and mfspr. 


e The processor enters privileged state (MSR[PR] = 0) in debug mode, allowing 
execution of any instruction and access to any memory location. 


e An OR signal of all interrupt cause register (ICR) bits enables the development port 
to detect pending events while already in debug mode. For example, the 
development port can detect a debug mode access to a nonexisting memory space. 


e Caches and MMUs are frozen in debug mode. All accesses made during debug mode 
will be to the memory. Cache contents can only be accessed via SPRs. 


36.3.1.1 Debug Mode Enable vs. Debug Mode Disable 


For protection purposes, there are two working modes, debug mode enable and debug mode 
disable, which are selected once at reset. Debug mode is enabled by asserting DSCK during 
reset. The state of this pin is sampled three clocks before the negation of SRESET. If DSCK 
is sampled negated, debug mode is disabled until a subsequent reset when DSCK is 
asserted. When debug mode is disabled, the internal watchpoint/breakpoint hardware 
remains operational and can be used for debugging by a software monitor program. 
Figure 36-7 is a timing diagram for the enabling debug mode. 


CLKOUT 





SRESET 


DSCK 





DSCK asserts high while SRESET asserted to enable'debug mode operation. 
DSCK asserts high after SRESET negation to enter debug mG6de immediately (without fetching reset vector). 





Figure 36-7. Debug Mode Reset Configuration Timing Diagram 


Note that because SRESET negation time depends on an external pull-up resistor, any 
reference to SRESET negation time in this chapter refers to the time the MPC850 releases 
SRESET. If SRESET rise time is long because of a large resistor, the setup time for debug 
port signals should be adjusted accordingly. 


When debug mode is disabled, all development support registers are accessible when 
MSR[PR]=0 and can be used by monitor debugger software. However, the processor never 
enters debug mode and the ICR and DER are used only for asserting and negating the freeze 
signal. For more information on the software monitor debugger support, see Section 36.4, 
“Software Monitor Debugger Support.” All development support registers accessible only 
when the core is in debug mode; therefore, the development system has full control of the 
core’s development support features. For more information, see Table 36-15. If debug 
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mode is enabled as described in this section, debug mode can be entered by the methods 
described in Section 36.3.1.2, “Entering Debug Mode.” 


36.3.1.2 Entering Debug Mode 


By appropriately programming the development port during reset, debug mode can be 
entered immediately out of reset, thus allowing the user to debug a ROM-less system. If 
DSCK is asserted throughout SRESET assertion and then past SRESET negation, the 
processor takes a breakpoint exception and goes directly to debug mode instead of fetching 
the reset vector. 


To avoid entering debug mode after reset, DSCK must be negated no later than seven clock 
cycles after SRESET negates, allowing the processor to jump to the reset vector and begin 
normal execution. If debug mode is entered immediately after reset, as shown in 
Figure 36-7, ICR[DPI] is set. 


The user can enable events that can initiate debug mode and determine which events require 
regular interrupt handling. 


The following events can cause the core to enter debug mode. Each event results in debug 
mode entry if debug mode is enabled and the corresponding enable bit is set in the DER. 
The reset values of the enable bits allow use of the debug mode features without 
programming the DER in most cases. See Table 36-25. 


¢ System reset, as a result of the assertion of SRESET, as described in Section 6.1.2.1, 
“System Reset Interrupt (0x00100).” 

¢ Checkstop, as described in Table 36-9. 

e Machine check interrupt. 

¢ Implementation-specific ITLB miss. 

¢ Implementation-specific ITLB error. 

¢ Implementation-specific DTLB miss. 

¢ Implementation-specific DTLB error. 

e External interrupt, recognized when MSR[EE] = 1. 

¢ Alignment exception. 

e Program exception. 

e Floating-point unavailable exception. 

e Decrementer interrupt, recognized when MSR[EE] = 1. 

e System call exception. 


e Trace, asserted when in single or branch trace mode, as described in 
Section 6.1.2.10, “Trace Exception (OxOODO0).” 


e Implementation-dependent software emulation exception. 
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e Instruction breakpoint. Recognized only when MSR[RI] = 1, when breakpoints ar 
maskable. Nonmaskable breakpoints are always recognized. | | 


¢ Load/store breakpoint. Recognized only when MSR[RI] = 1, when breakpoints are 
maskable. Nonmaskable breakpoints are always recognized. 


¢ Maskable breakpoint from the development port generated by external modules are 
recognized only when MSR[RI] = 1. 


¢ Development port nonmaskable interrupt resulting from a debug station request. 
Useful in some catastrophic events like an endless loop when MSR[RI] = 0. This 
may cause the machine to enter a nonrestartable state. See Section 6.1.5, 
“Recoverability after an Exception.’ : 


The processor enters debug mode when at least one ICR bit is set, the corresponding DER 
bit is enabled, and debug mode is enabled. When debug mode is enabled and an enabled 
event occurs, the processor waits until its pipeline is empty before fetching instructions 
from the development port. Section Chapter 6, “Exceptions,” gives the exact SRRO and 
SRRI values. If the core is in debug mode, the freeze indication is asserted, causing any 
properly programmed peripheral to stop. The development port should read the value of the 
ICR to get the cause of the debug mode entry. Reading the ICR clears all of its bits. 


36.3.1.3 Debug Mode Indication 


The fact that the core is in debug mode is broadcast to the external world using the value 
Ob11 on the VELS pins. Debug mode indication will also be given on the FRZ pin. Note, 
however, that the FRZ indication can also be used by software monitors, as described in 
Section 36.4, “Software Monitor Debugger Support.” 


36.3.1.4 Checkstop State and Debug Mode 


The core enters checkstop state if the machine check interrupt is disabled (MSR[ME] = 0) 
and a machine check interrupt is detected. However, if DER[CKSTPE] is also set, the core _ 
enters debug mode rather then the checkstop state. Table 36-9 shows the various actions the 
core can take when a machine check interrupt is detected. 


Table 36-9. Checkstop State and Debug Mode 


Debug Mode Core Response to Machine 
DER[CHSTPE] | DER[MCIE] Check Interrupt ICR Value 
Enter the checkstop state 0x20000000 


ee 

a ee ae Branch to machine check interrupt | 0x10000000 
Pe Enter checkstop state 0x20000000 
ae oe 










X 
X 


Enter debug mode 0x20000000 
Branch to machine check interrupt | 0x10000000 
Enter debug mode 0x10000000 


7 
X 


i 


ae 
es 
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36.3.1.5 Saving Machine State when Entering Debug Mode 


If any load/store-type exception causes the store to enter debug mode, the critical 
information in DAR and DSISR must be saved before any other operation is performed. 
Failing to do so can cause information loss if the development software encounters another 
load/store-type exception. Because exceptions are treated differently in debug mode, there 
is no need to save SRRO and SRR1. 


36.3.1.6 Running in Debug Mode 


When running in debug mode, all fetch cycles access the development port, regardless of 
the cycle’s actual address. All load/store cycles access the real memory system according 
to the cycle’s address. The data register of the development port is mapped as an SPR and 
is accessed using mtspr and mfspr via special load/store cycles (see Table 36-14). 


Exceptions are treated differently in debug mode; the ICR is updated on recognition of an 
exception according to the event that caused it. A special error indication (ICR_OR) is 
asserted for one clock cycle to notify the development port when an exception occurs. 
Execution continues in debug mode without changing SRRO and SRR1. To allow the 
development system to detect the excepting instruction, ICR_OR is asserted before the next 
fetch. Not all exceptions are recognized in debug mode. Hardware does not generate 
breakpoints and watchpoints in debug mode, regardless of the value of MSR[RI]. On 
entering debug mode, MSR[EE] is cleared, forcing hardware to ignore external and 
decrementer interrupts. 


Note that debug software must not set MSR[EE] in debug mode because the external 
interrupt event is a level signal. Because the core only reports and does not handle 
exceptions in debug mode, core hardware does not clear MSR[EE]. This event, if enabled, 
is recognized on every clock. When ICR_OR is asserted the development station should 
read the ICR to find what event caused the exception. Because SRRO and SRR1 do not 
change, if an exception is recognized in debug mode, they change only once when entering 
debug mode. However, saving SRRO and SRR1 when entering debug mode is unnecessary. 


36.3.1.7 Exiting Debug Mode 


The rfi instruction is used to exit from debug mode to return to the normal processor 
operation and to negate the freeze indication. The development system may monitor the 
FRZ or FLS pins to make sure the MPC850 is out of debug mode. It is the responsibility of 
the debugger to read the ICR before performing the rfii instruction. Failing to do so forces 
the core to immediately reenter debug mode and to reassert the freeze indication if an 
asserted ICR bit has a corresponding enable bit set in the DER. 


36.3.2 Development Port Communication 


The development port provides a full duplex serial interface for communications between 
the internal development support logic and an external development tool. Figure 36-5 
shows the relationship of the development support logic to the rest of the core. For clarity, 
the development port support logic is shown as a separate block. 
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36.3.2.1 Development Port Pins 


The following development port pin functions are provided: 


¢ Development serial clock 
¢ Development serial data in 
e¢ Development serial data out 


e Freeze 


36.3.2.1.1 Development Serial Clock (DSCK) 


DSCK is used at reset to enable debug mode, which can be entered either immediately 
following reset or for event-driven entry into debug mode as described in Section 36.3.1.2, 
“Entering Debug Mode.” The DSCK input must be driven either high or low at all times and 
must not be allowed to float. A typical target environment would pull this input low with a 
resistor. When the development port is in asynchronous clocked mode, the development 
serial clock (DSCK) is used to shift data into and out of the development port shift register. 
At the same time, the new msb of the shift register is presented at the DSDO pin. 


The clock may be implemented as a free-running or gated clock. As discussed in 
Section 36.3.2.4, “Development Port Serial Communications—Trap Enable Mode,” and 
Section 36.3.2.5, “Development Port Serial Communications—Debug Mode,’ data shifting 
is controlled by the ready and start signals, so the clock does not need to be gated with the 
serial transmissions. 


36.3.2.1.2 Development Serial Data In (DSDI) 


External logic presents data to be transferred into the development port shift register at the 
development serial data in pin (DSDI). When driven asynchronously with the system clock, 
data presented to DSDI must be stable at setup time before the rising edge of DSCK and at 
hold time after the rising edge of DSCK. When driven synchronously to the system clock, 
data must be stable on DSDI or a setup time before system clock output (CLKOUT) rising 
edge and a hold time after the rising edge of CLKOUT. DSDI is also used at reset to select 
the development port clock mode. See Section 36.3.2.3, “Development Port Serial 
Communications—Clock Mode.’ 


36.3.2.1.3 Development Serial Data Out (DSDO) 


Debug mode logic uses the development serial data out pin (DSDO) to shift data out of the 
development port shift register. DSDO transitions are synchronous with DSCK or 
CLKOUT, depending on the clock mode. 


36.3.2.1.4 Freeze 


The freeze indication means that the processor is in debug mode (normal processor 
execution of user code is frozen). Freeze state is indicated on FRZ and is generated 
synchronously to the system clock. This indication can be used to halt any off-chip device 
while in debug mode and is a handshake between the debug tool and port. In addition to 
FRZ, the freeze state is indicated by the value 0b11 on VFLS[O—1], shown in Figure 36-8. 
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VFLSO | - 
GND |: 
GND]: 


-| SRESET 

-| DSCK 

-| VFSL1 

HRESET | - -| DSDI 
Vpp|° -| DSDO 


Figure 36-8. Development Port/BDM Connector Pinout Options 


-| SRESET 
-| DSCK 
“RZ 
-|DSDI 
-|DSDO 





Internal freeze status can also be monitored through status in the data shifted out of the 
debug port. 


36.3.2.2 Development Port Registers 


The development port consists logically of three registers: 


e The trap enable control register (TECR) 
e The development port instruction register (DPIR) 
¢ Development port data register (DPDR) 


DPIR and DPDR are both implemented as the development port shift register, which also 
acts as a temporary holding register for data to be stored in the TECR. 


36.3.2.2.1 Development Port Shift Register 

Instructions and data are serially shifted into the 35-bit development port shift register from 
the DSDI. DSCK or CLKOUT is the shift clock, depending on the debug port clock mode. 
See Section 36.3.2.3, “Development Port Serial Communications—Clock Mode.” 


The instructions or data are then transferred in parallel to the core and TECR. When the 
processor enters debug mode it fetches instructions from DPIR that cause an access to the 
development port shift register. These instructions are serially loaded into the shift register 
from DSDI using DSCK or CLKOUT as the shift clock. Similarly, data is transferred to the 
core. Data is shifted into the shift register and read by the processor by executing 
mfspr[DPDR]. Data is also parallel loaded into the development port shift register from 
the core by executing mtspr[DPDR]. It is then serially shifted out to DSDO using DSCK 
or CLKOUT as the shift clock. 


36.3.2.2.2 Trap Enable Control Register (TECR) 

The TECR is a 9-bit register that is loaded from the development port shift register. The 
contents of TECR drives the six trap enable signals, two breakpoint signals, and VSYNC 
signal to the core. The transfer data to TECR commands send the appropriate bits to the 
TECR. The TECR is not accessed by the core, but supplies signals to the core. The trap 
enable bits, VSYNC bit, and the breakpoint bits of this register are loaded from the 
development port shift register as the result of trap enable mode transmissions. The trap 
enable bits are reflected in ICTRL and LCTRL2. Section 36.5.1.1, “Comparator A—H Value 
Registers (CMPA—CMPH),’ describes support registers. 
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36.3.2.2.3 Development Port Registers Decode 

The development port shift register is selected when the core accesses DPIR or DPDR. 
Accesses to either register occur in debug mode and appears on the internal bus as an 
address and the assertion of an address attribute signal indicating that an SPR is being 
accessed. In debug mode, the core reads the DPIR to fetch all instructions; it reads and 
writes to the DPDR to transfer data between the core and external development tools. DPIR 
and DPDR are pseudo-registers; decoding either causes the development port shift register 
to be accessed. Debug mode logic knows whether the core is fetching instructions or 
reading or writing data. A sequence error is signaled to the external development tool when 
the core expected result and the GPR results do not match, for example if an instruction is 
received when data is expected. 


36.3.2.3 Development Port Serial Communications—Clock Mode 


All development port serial transmissions are synchronous communications. The 
development port supports two ways to clock serial transmissions. 


36.3.2.3.1 Asynchronous Clocked Mode—Using DSCK 


The first clock mode is called asynchronous clocked since the input clock DSCK is 
asynchronous with CLKOUT. To ensure that data on DSDI is sampled correctly, transitions 
on DSDI must meet all setup and hold times with respect to the rising edge of DSCK. This 
clock mode allows communications with the port from a development tool which does not 
have access to CLKOUT or where CLKOUT has been delayed or skewed. Figure 36-9 
shows the serial communications asynchronous clocked timing. 


DSCK 
DSDI 


DSDO — 





Debug Port detects the “start” bit on DSDI and follows the 
“ready” bit with two status bits and 7 or 32 output data bits. 


Development Tool drives the “start” bit on DSDI (after detecting the “ready” bit 
on DSDO when in debug mode). The “start bit is immediately followed by a 
mode bit and a control bit and then 7 or 32 input data bits. 


Debug port drives the “ready” bit onto DSDO when ready for a new transmission. 
NOTE: DSCK and DSDI transitions are not required to be synchronous with CLKOUT. 


Figure 36-9. Asynchronous Clocked Serial Communications 
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36.3.2.3.2 Synchronous Self-Clocked Mode—Using CLKOUT 

The second clock mode is called synchronous self-clocked and does not require an input 
clock. Instead, the port is clocked by the system clock. The DSDI input is required to meet 
setup and hold time requirements with respect to CLKOUT rising edge. The data rate for 
this mode is always the same as the system clock. The timing diagram in Figure 36-10 
shows the serial communications synchronous self-clocked timing. 


CLKOUT 


DSDI 


DSDO 





Debug port detects the start bit on DSDI and follows the ready 
bit with two status bits and 7 or 32 output data bits. 


Development tool drives the start bit onto DSDI (after detecting the ready bit on 
DSDO when in debug mode). The start bit is immediately followed by a mode bit 
and a control bit and then 7 or 32 input data bits. 


Debug port drives the ready bit onto DSDO when the core starts a read of DPIR or DPDR. 
Figure 36-10. Synchronous Self-Clocked Serial Communications 


36.3.2.3.3 Selection of Development Port Clock Mode 

The selection of clocked or self-clocked mode is made at reset. The state of the DSDI input 
is latched eight clocks after negation of SRESET. If it is latched low, asynchronous clocked 
mode is enabled. If it is latched high, then synchronous self-clocked mode is enabled. The 
timing diagram in Figure 36-11 shows the clock mode selection after reset. 
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CLKOUT 


SRESET 





DSDI 
CLKEN 
DSDI is used after SRESET negation to select-cleck mode. 
lf DSDI is slow, the internal asynchronous clock ignal asserts 8 clocks after SRESET negation. 


This enables asynchronous clock mode. 
lf DSDI is high, self-clocked mode is selected first start bit detected after DSD!I-negat 


Figure 36-11. Enabling Clock Mode after Reset 


Since DSDI is used to select the development port clock scheme, it is necessary to prevent 
any transitions on DSDI during clock mode select. The port will not begin scanning for the 
start bit of a serial transmission until 16 clocks after the negation of SRESET. If DSDI is 
asserted 16 clocks after SRESET negates, the port waits until DSDI is negated to begin 
scanning for the start bit. 


36.3.2.4 Development Port Serial Communications—Trap Enable 
Mode 


When not in debug mode, the development port begins communicating by setting DSDO 
(the msb of the 35-bit development port shift register) low to indicate that all activity related 
to the previous transmission is complete and that a new transmission can begin. The start 
of a serial transmission from an external development tool to the development port is 
signaled by a start bit. A mode bit in the transmission defines it as either a trap enable mode 
transmission or a debug mode transmission. If the mode bit is set, the transmission will be 
10 bits long and only seven data bits will be shifted into the shift register. These seven bits 
will be latched into the TECR. A control bit determines whether the data is latched into the 
trap enable and VSYNC bits of the TECR or into the breakpoints bits of the TECR. 


36.3.2.4.1 Serial Data Into Development Port 

The development port shift register is 35 bits wide, but trap enable mode transmissions only 
use 10 of the 35 bits as the following —the start/ready bit, a mode/status bit, a control/status 
bit, and the 7 least-significant data bits. 
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Table 36-10 shows the encoding of trap data shifted into the (through DSDIJ). 


Table 36-10. Trap Enable Data Shifted into Development Port Shift Register 


_ a 


0 = Disabled Transfer data to trap enable 
1 = Enabled control register 





Table 36-11 shows the encoding of debug port command data shifted into the development 
port shift register. 


Table 36-11. Debug Port Command Shifted Into Development Port Shift Register 


Major Opcode 




















11111 Negate nonmaskable breakpoint 


1 1 1 X 
| 00010 SRESET request 
The watchpoint trap enables and VSYNC functions are described in Section 36.2, 
“Watchpoints and Breakpoints Support,’ and Section 36.1, “Tracking Program Flow.” The 
debug port command function allows the development tool to either assert or negate 
breakpoint requests, reset the processor, activate or deactivate the fast download procedure. 
36.3.2.4.2 Serial Data Out of Development Port 


In trap enable mode there is no data from the core out of the development port. Data out of 


the development port in the trap enable mode is shown in Table 36-12. 
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Table 36-12. Status/Data Shifted Out of Development Port Shift Register 


dy [0-1] ris Bits 2-31 or 2-6 Depending on lager Mode 


Data Valid data from 
core 















status '! | procedure = 


' The freeze status is 1 when the core is in debug mode. Otherwise it is 0. 


2 The “Download Procedure In Progress” status is asserted (0) when the debug port in the download procedure is 
negated. Otherwise it is set to 1. 


The “Valid Data from Core” and “Core Interrupt” functions cannot occur in trap enable 
mode. When not in debug mode, the sequencing error encoding indicates that the 
transmission from the external development tool was a debug mode transmission. When a 
sequencing error occurs the development port ignores the data shifted in while the 
sequencing error is shifting out and is treated as a no-op function. The null output encoding 
is used to indicate that the previous transmission had no associated errors. When not in 
debug mode, ready is asserted at the end of each transmission. If debug mode is not enabled 
and transmission errors can be guaranteed not to occur, the status output is not needed. 


36.3.2.5 Development Port Serial Communications-Debug Mode 


Debug mode is a superset of trap enable mode. All of the Hap enable mode functionality is 
available, with the following additions. 


e In debug mode, the development port starts communications by setting DSDO low 
to indicate that the core is trying to read an instruction from DPIR or data from 
DPDR. 


e When the core writes data to the port to be shifted out, the ready bit is not set. 
Instead, the port waits for the core to read the next instruction before asserting ready. 
This allows duplex operation of the serial port and lets the port control all 
transmissions from the external development tool. After detecting this ready status 
the external development tool begins transmitting to the development port with a _ 
start bit (logic high) on DSDI. 


36.3.2.5.1 Serial Data Into Development Port 

In debug mode the 35 bits of the development port shift register are interpreted as a 
start/ready bit, a mode/status bit, a control/status bit, and 32 bits of data. All instructions 
and data for the core are sent with the mode bit cleared indicating a 32-bit data field. 
Table 36-13 shows the encoding of data shifted into the development port shift register 
through DSDI. Data values in the last two functions other than those specified are reserved. 
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Table 36-13. Debug Instructions/Data Shifted Into Development Port Shift Register 


em Instruction/Data (32 Bits) 
Bits 0-6 Bits 7-31 


2 Trap enable bits Transier data to trap enable control register | 












0b001_ 1111 Negate breakpoint requests to core 
LC 


Note: See Table 36-10 for details on trap enable bits. 





Transmissions from the debug port on DSDO begin with a zero or ready bit, indicating that 
the core is trying to read an instruction or data from the port. The external development tool 
must wait until it sees DSDO go low before sending the next transmission. The control bit 
distinguishes instructions from data, allowing the development port to detect that an 
instruction was entered when the core was expecting data and vice versa. If this occurs, a 
sequence error indication is shifted out in the next serial transmission. The trap enable 
function allows the development port to transfer data to the trap enable control register. The 
debug port command function allows the development tool to either negate breakpoint 
requests, reset the processor, activate, or deactivate the fast download procedure. The NOP 
function provides a null operation for use when there is data or a response to be shifted out 
of the data register. The appropriate next instruction or command will be determined by the 
value of the response or data shifted out. 


36.3.2.5.2 Serial Data Out of Development Port 


The encoding of data shifted out of the development port shift register in debug mode is the 
same as for trap enable mode, as shown in Table 36-12. The valid data encoding is used 
when data has been transferred from the core to the development port shift register as the 
result of an instruction to move the contents of a GPR to the DPDR. The valid data encoding 
has the highest priority of all status outputs and is reported even if an interrupt occurs at the 
same time. Because a sequencing error cannot occur when data is valid, there is no priority 
conflict with the sequencing error status. Also, an interrupt recognized when there is valid 
data is not related to the execution of an instruction, therefore, a valid data status is output 
and the interrupt status is saved for the next transmission. 
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The sequencing error encoding indicates that the inputs from the external development tool 
are not what the development port and/or the core was expecting. There are two possible 
causes for this error: | —_ 


e The processor was trying to read instructions and data was shifted into the 
development port. 


e The processor was trying to read data and an instruction was shifted into the 
development port. 


Nonetheless, the port terminates the read cycle with a bus error. In turn, this bus error causes 
the core to signal that an interrupt exception occurred. Because a status of sequencing error 
is of higher priority than an exception, the port reports the sequencing error first and the 
core interrupt on the next transmission. The development port ignores the command, 
instruction, or data shifted in while the sequencing error or core interrupt is shifted out. The 
next transmission, after all error status is reported to the port, should be a new instruction, 
trap enable, or command. — | 


The interrupt occurred encoding indicates that the core encountered an interrupt during the 
execution of the previous instruction in debug mode. Interrupts may occur as the result of 
instruction execution (such as unimplemented opcode or arithmetic error), because of a 
memory access fault, or from an unmasked external interrupt. When an interrupt occurs the 
development port ignores the command, instruction, or data shifted in while the interrupt 
encoding was shifting out. The next transmission to the port should be a new instruction, 
trap enable, or debug port command. Finally, the null encoding indicates that no data was 
transferred from the core to the development port shift register. 


36.3.2.5.3 Fast Download Procedure 


The fast download procedure downloads a block of data from the debug tool into the system 
memory by repeating the sequence of transactions shown in Figure 36-12 from the 
development tool to the debug port for the number of data words to be downloaded. 


INIT: Save RX, RY 
RY <- Memory Block address- 4 


repeat: mfspr RX, DPDR 


DATA word to be moved to memory 
stwu RX, 0x4(RY) 


until here 
Restore RX,RY 
Figure 36-12. Download Procedure Code Example 


In this example, RX = r31 and RY = 130. The sequence is repeated until the end download 
procedure command is issued to the debug port. GPR31 temporarily stores the data value. 
Before issuing the start download procedure command, the value of the first memory block 
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address -4 must be written into GPR30. To end the download, an end download procedure 
command should be issued to the debug port and an additional data transaction should be 
sent by the development tool. This data word is not placed into system memory, but it is 
needed to stop the procedure. 


For large blocks of data this sequence may take a long time to complete. The fast download 
procedure can reduce this time by eliminating the need to transfer instructions in the loop 
to the debug port. The only transactions needed are those that transfer the data to be placed 
in the system memory. Figure 36-13 shows the time benefit of the fast download procedure. 


External 
Transaction 


Internal 
Activity 





Slow Download Procedure Loop 


External 
Transaction 


Internal 
Activity 





Fast Download Procedure Loop 


Figure 36-13. Fast and Slow Download Procedure Loops 


36.4 Software Monitor Debugger Support 


With debug mode disabled, a software monitor debugger can use the development support 
features defined in the core; all events result in regular exception handling (the processor 
resumes execution in the corresponding interrupt handler). The ICR and DER influence 
only the assertion and negation of the freeze signal. 


36.4.1 Freeze Indication 


The internal freeze signal connects to all relevant internal modules, which can be 
programmed to stop all operations in response to the assertion of the freeze signal. To 
enable a software monitor debugger to broadcast the fact that debug software has executed, 
it is possible to assert and negate the internal freeze signal when debug mode is disabled. 


The assertion of the freeze signal is broadcast externally over FRZ. As shown in 
Figure 36-6, the ICR and DER control assertion and negation of the freeze signal when 
debug mode is disabled. To assert the freeze signal, software must program the relevant 
DER bits, but to negate the freeze line, the software must read the ICR to clear it and 
execute an rfi. If the ICR is not cleared before the rfi is executed, the freeze signal is not 
negated. Therefore, it is possible to nest inside a software monitor debugger without 
affecting the value of the freeze line, even though rfi may execute a few times. Only before 
the last rfi instruction does software need to clear the ICR. The above mechanism allows 
software to accurately control the assertion and negation of the freeze line. 
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36.5 Development Support Programming Model 


The MPC850 implements a set of SPRs, shown in Table 36-14, that support debugging and 
reside in the control registers space. They can be accessed using mtspr and mfspr. 


Table 36-14. MPC850-Specific Development Support and Debug SPRs 
SPR Number 


7 3 Name Serialization Performed in Response to Access 
SPR [5-9] | SPR [0—4] 


Development Support Registers 


152 00100 11000 |CMPE Write: Fetch sync 

Read: Sync relative to load/store operations 
153 00100 11001 | CMPF Write: Fetch sync 

Read: Sync relative to load/store operations 
154 00100. 11010 |CMPG Write: Fetch sync 

Read: Sync relative to load/store operations 
155 00100 11011. | CMPH Write: Fetch sync 

Read: Sync relative to load/store operations 
156 00100 11100 {LCTRL1 Write: Fetch sync 

Read: Sync relative to load/store operations 
157 001 00 11101 LCTRL2 Write: Fetch sync 

Read: Sync relative to load/store operations 


158 00100 11110) =|ICTRL Fetch sync on write 
159 00100 11111 


148 00100 10100 
149 00100 10101 
630 eee 10110 |DPDR 


The development support/debug registers are protected as described in Table 36-15. Note 
the special behavior of the [CR and DPDR. 








Write: Fetch sync 
Read: Sync relative to load/store operations. See 


Section 4.1.2.1, “DAR, DSISR, and BAR Operation.” 





Debug Registers 





Fetch sync on write 








Fetch sync on write 


Read and Write 
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Table 36-15. Development Support/Debug Registers Protection 













Operatio Debug Mode 


Enable 


register 


Read is not performed, program interrupt is generated. (When 
reading ICR, it is not cleared.) 









Write is performed. (Write to |CR or DPDR is ignored, the 
register is not modified and no interrupt is generated.) 










register 


Write is performed. (Write to ICR is ignored, the register is not 
modified and no interrupt is generated.) 


Write is not performed, program interrupt is generated. 


36.5.1 Development Support Registers 


The following sections describe the development support registers. 


36.5.1.1 Comparator A—H Value Registers (CMPA—CMPH) 

The comparator value registers (CMPA—CMPH) hold the instruction and data to be used in 
comparisons. Figure 36-14 shows CMPA—CMPD, which are used for instruction address 
bus comparisons. Because instructions are 32 bits wide (word), bits 30—31 are not used. 





a, es We 
144 (CMPA), 145 (CMPB), 146 (CMPC), 147 (CMPD) 
Figure 36-14. Comparator A—D Value Register (CMPA-—CMPD) 





Table 36-16 describes CMPA—CMPD fields. 
Table 36-16. CMPA—CMPD Field Descriptions 


[om [name [tenon 
CMPV Address bits to be compared. 


Figure 36-15 shows CMPE—CMPF, which are used for load/store address bus comparisons. 
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CMPV 








Figure 36-15. Comparator E—F Value Registers (CMPE-—CMPF) 


Table 36-17 describes CMPE—CMPF fields. 


Table 36-17. CMPE-—CMPF Field Descriptions 


0-31 CMPV Address bits to be compared. 


Figure 36-15 shows CMPG—CMPH, which are used for load/store data bus comparisons. 












Figure 36-16. Comparator G-H Value Registers (CMPG—CMPH) 


Table 36-18 describes CMPG—CMPH fields. 


Table 36-18. CMPG-CMPH Field Descriptions 


0-31 CMPV Data bits to be compared. 


36.5.1.2 Breakpoint Address Register (BAR) 


The breakpoint address register (BAR), shown in Figure 36-17, is used to hold the address 
of the load/store cycle that generated a breakpoint. 













BARV 
Undefined 








Figure 36-17. Breakpoint Address Register (BAR) 
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Table 36-19 describes BAR fields, 
Table 36-19. BAR Field Descriptions 


se 


| 0-81 | BARV The address of the load/store cycle that generated the breakpoint. 





36.5.1.3 Instruction Support Control Register (ICTRL) 


The instruction support control register (CTRL), shown in Figure 36-18, is used to 
configure instruction breakpoint operations. 


2 [we | swoen sien sizen|siwaenowoeNowieNDWeENoWaEN) FM [ISCT_SER 


0000_0000_0000_0000 
R/W 
158 


Figure 36-18. Instruction Support Control Register (ICTRL) 





Table 36-20 describes ICTRL fields. 
Table 36-20. ICTRL Field Descriptions 


Compare type of comparator A-D 
Oxx Not active (reset value) 

100 Equal 

101 Less than 

110 Greater than 

111 Not equal 


Instruction first watchpoint programming. 
Ox Not active (reset value) 

10 Match from comparator A 

11 Match from comparators (A & B) 


Instruction second watchpoint programming. 
Ox Not active (reset value) 

10 Match from comparator B 

11 Match from comparators (A | B) 


Instruction third watchpoint programming. 


Ox Not active (reset value) 
10 Match from comparator C 
11 Match from comparators (C & D) 


Instruction fourth watchpoint programming. 
Ox Not active (reset value) 

10 Match from comparator D 

11 Match from comparators (C | D) 
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j ame | Nee 
Pao soe 
P| 


Table 36-20. ICTRL Field Descriptions (Continued) 


Software trap enable selection of instruction watchpoints 0-3. 
O Trap disabled (reset value) 
1 Trap enabled 






























Development port trap enable selection of the instruction watchpoints 0-3 (read-only bit). 
0 Trap disabled (reset value) 
1 Trap enabled 


DIW1EN 
DIW2EN 
DIW3EN 


29-31 | ISCT_SER 


Ignore first match, only for instruction breakpoints. 
0 Do not ignore first match, used for “go to x” (reset value). 
1 Ignore first match (used for “continue”). 






Instruction fetch show cycle/core serialize control. Changing the instruction show cycle 
programming takes effect only from the second instruction after the mtspr[ICTRL]. 
000 Core is fully serialized; show cycle is performed for all fetched instructions (reset value). 
001 Core is fully serialized; show cycle is performed for all changes in program flow. 

010 Core is fully serialized; show cycle is performed for all indirect changes in program flow. 

011 Core is fully serialized; no show cycles is performed for fetched instructions. 

100 Illegal. 

101 Core is not serialized (normal mode); show cycle is performed for all changes in the 
program flow. If the fetch of the target of a direct branch is aborted by the core (because 
of an exception), the target is not always visible on the external pins. Program trace is 
not affected by this phenomenon. ; 

110 Core is not serialized (normal mode; show cycle is performed for all indirect changes in 
program flow. 

111 Core is not serialized (normal mode); no show cycle is performed for fetched 
instructions. 

When ISCT_SER = 010 or 110, the STS functionality of OP2/MODCK1/STS must be 

enabled by writing 10 or 11 to SIUMCR[DBGC]. The address on the external bus should be 

sampled only when STS is asserted. | : 








36.5.1.4 Load/Store Support Comparators Control Register 
(LCTRL1) 


The load/store support comparators control register (LCTRL1), shown in Figure 36-19, is 
used to configure load/store address breakpoint operations. 








CTE CTF 


fF cse | csv |susc|susi | casmsx | onemsx | 


Figure 36-19. Load/Store Support Comparators Control Register (LCTRL1) 
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Table 36-21 describes LCTRULI fields. 
Table 36-21. LCTRL1 Field Descriptions 


1 a 


| CTE — | Compare type, comparators E—H. OxxNot active (reset value) 
100 Equal 

101 Less than 

110 Greater than 

| 111 Not equal 















Q— 


—_ 
—_ 





12-13 CRWE Select match on read/write of comparators E and F. 
Ox Don’t care (reset value) 
10 Match on read 


11 Match on write 












14-15 CRWF 





16-17 Compare size, comparator G and H. 
00 Reserved 
01 Word 

10 Half-word 


11 Byte 


18-19 





SUSG Signed/unsigned operating mode for comparator G and H. 
0 Unsigned 


SUSH 1 Signed 


22-25 | CGBMSK | Byte mask for comparator G and H. 
0000 All bytes are not masked 


26-29 | CHBMSK | 9001 Last byte of the word is masked 








1111 All bytes are masked 


36.5.1.5 Load/Store Support AND-OR Control Register (LCTRL2) 


The load/store support AND-OR control register (LCTRL2), shown in Figure 36-21, is 
used to configure load/store watchpoint operations. 





jniclinnnjumioecarrwousc) ‘ue LEN L¥mEN STEN 


0000_0000_0000_0000 
R/W 
157 


Figure 36-20. Load/Store Support AND-OR Control Register (LCTRL2) 
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Table 36-22 describes LCTRL2 fields. 
Table 36-22. LCTRL2 Field Descriptions 


ee Pm [me 


LWOEN First load/store watchpoint enable bit. . 
0 Watchpoint not enabled (reset value) 
1 Watchpoint enabled 


LWOIA First load/store watchpoint instruction watchpoint selection. 
00 First instruction watchpoint 

_01 Second Instruction watchpoint 
10 Third instruction watchpoint 
11 Fourth Instruction watchpoint 


LWOIADC | First load/store watchpoint care/don’t care instruction events. 
0 Don’t care 
1 Care 


First load/store watchpoint load/store address events selection. 
00 Match from comparator E 

01 Match from comparator F 

10 Match from comparators (E & F) 

11 Match from comparators (E | F) 


LWOLADC | First load/store watchpoint care/don’t care load/store address events. 
0 Don't care 
1 Care 


First load/store watchpoint load/store data events selection. 


00 Match from comparator G 

01 Match from comparator H 

10 Match from comparators (G & H) 
11 Match from comparators (G | H) 


LWOLDDC | First load/store watchpoint eatercont care load/store data events. 
0 Don’t care 
1 Care 


Second load/store watchpoint enable bit. 
0 Watchpoint not enabled (reset value) 
1 Watchpoint enabled 


Second load/store watchpoint load/store address watchpoint selection. 
00 First instruction watchpoint 

01 Second instruction watchpoint 

10 Third instruction watchpoint 

11 Fourth instruction watchpoint 


LW1IADC {| Second load/store watchpoint care/don’t care load/store address events. 
0 Don’t care 
1 Care 


LW1 LA Second load/store watchpoint load/store address events selection. 
00 Match from comparator E 

01 Match from comparator F 

10 Match from comparators (E & F) 

11. Match from comparators (E | F) 
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Table 36-22. LCTRL2 Field Descriptions (Continued) 


16 . LADC | Second load/store watchpoint care/don’t care load/store address events. 
0 Don’t care 
1 Care 


— LW1LD Second load/store watchpoint load/store data events selection. 
00 Match from comparator G 
01 Match from comparator H 
| 10 Match from comparators (G & H) 
11 Match from comparator (G | H) 


LW1LDDC | Second load/store watchpoint care/don’t care load/store data events. 
0 Don’t care 
1 Care 


es Internal breakpoints nonmask bit (controls both instruction and load/store breakpoints). 
| 0 Masked mode, breakpoints are recognized only when MSR[RI] =1 (reset value). 


1 Nonmasked mode, breakpoints are always recognized. 


ao — 


DLWOEN Development port trap enable selection of the first load/store watchpoint (read-only bit). 
0 Trap disabled (reset value) 
1 Trap enabled 


DLW1EN Development port trap enable selection of the second load/store watchpoint (read-only bit). 


SLWOEN Software trap enable selection of the first load/store watchpoint. 
0 Trap disabled (reset value) 
1 Trap enabled 
SLWIEN Software trap enable selection of the second load/store watchpoint. 
0 Trap disabled (reset value) 
| 1Trap enabled 


Programming each watchpoint consists of three control register fields -LWxIA, LWxLA, 
and LWxLD. All three conditions must be detected to assert a watchpoint. 





36.5.1.6 Breakpoint Counter Value and Control Registers 
(COUNTA/COUNTB) 


The breakpoint counter value and control registers (COUNTA/COUNTB), shown in 
Figure 36-21, can be programmed with the preset count value and counter source. 
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CNTCV 
Undefined 


0000_0000_0000_0000 
R/W 
150 (COUNTA), 151 (COUNTB) 


Figure 36-21. Breakpoint Counter Value and Control Registers (COUNTA/COUNTB) 
Table 36-23 describes COUNTA and COUNTB fields. 


Table 36-23. COUNTA/COUNTE Field Descriptions 


eae 
CNTV Counter preset value 
Counter source select 
00 Not active (reset value) 
01 Instruction first (COUNTA)/second (COUNTB) watchpoint 


10 Load/store first (COMIN TNSECane (COUNTB) watchpoint 
11 Reserved 
















36.5.2 Debug Mode Registers 


The debug registers are described in the following sections. 


36.5.2.1 Interrupt Cause Register (ICR) 


The ICR indicates the reason that debug mode was entered. ICR bits are set by the hard- 
ware and cleared when the register is read. Attempts to write to ICR are ignored. All bits 
are Cleared when exiting reset. | 


[=Jastjouste| wor | fexiali|pni/rruvioec|_ — [evel] Tm | — 


f=[ser]isus[owaws|imecn|orisen| SS _LBKIBRfeBK(OPT 


0000_0000_0000_0000 
IW 
148 


Figure 36-22. Interrupt Cause Register (ICR) 
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ICR protection is described in Table 36-15 Table 36-24 describes ICR fields. 
Table 36-24. ICR Field Descriptions 


Reset interrupt bit. Set when the SRESET is asserted. 


CHSTP | Check stop bit. Set when the machine check interrupt is asserted and MSR[ME] = 0. Results in 
set. 


debug mode entry if debug mode is enabled and the corresponding enable bit is set. Otherwise, 
the processor enters checkstop state. 
cel A 
EXTI External interrupt bit. Set when the external interrupt is asserted. Causes debug mode entry if 
debug mode is enabled and the corresponding enable bit is set. 
Alignment interrupt bit. Set when the alignment interrupt is asserted. Causes debug mode entry 
| if debug mode is enabled and the corresponding enable bit is set. 
Program interrupt bit. Set when the program interrupt is asserted. Causes debug mode entry if | 
debug mode is enabled and the corresponding enable bit is set. 
FPUVI | Floating-point unavailable interrupt bit. Set when the floating-point unavailable interrupt is 
| asserted. Causes debug mode entry if debug mode is enabled and the corresponding enable bit 
10 DECI | Decrementer interrupt bit. Set when the decrementer interrupt is asserted. Causes debug mode 
| entry if debug mode is enabled and the corresponding enable bit is set. 


Reserved 


System call interrupt bit. Set when the system call interrupt is asserted. Causes debug mode 
entry if debug mode is enabled and the corresponding enable bit is set. 

















Machine check interrupt bit. Set when the machine check interrupt is asserted and MSR[ME] 
=1. Causes debug mode entry if debug mode is enabled and the corresponding enable bit is 
















Trace interrupt bit. Set when in single-step mode or when in branch trace mode. Causes debug 
mode entry if debug mode is enabled and the corresponding enable bit is set. 


Reserved 


Implementation-dependent software emulation interrupt. Set when the floating-point assist 
interrupt is asserted. Causes debug mode entry if debug mode is enabled and the 
corresponding enable bit is set. 









implementation-specific ITLB miss. Set as a result of an ITLB miss. Causes debug mode entry 
if debug mode is enabled and the corresponding enable bit is set. 







Implementation-specific DTLB miss. Set as a result of an DTLB miss. Causes debug mode 
entry if debug mode is enabled and the corresponding enable bit is set. 







Implementation-specific ITLB error. Set as a result of an ITLB error. Causes debug mode entry 
if debug mode is enabled and the corresponding enable bit is set. 







Implementation-specific DTLB error. Set as a result of an DTLB error. results in debug mode 
entry if debug mode is enabled and the corresponding enable bit is set. 
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Table 36-24. ICR Field Descriptions (Continued) 


9d 
iat all lees 


Load/store breakpoint interrupt bit. Set as a result of the assertion of an load/store breakpoint. 
Causes debug mode entry if debug mode is enabled and the corresponding enable bit is set. 









Instruction breakpoint interrupt bit. Set as a result of the assertion of an instruction breakpoint. 
Causes debug mode entry if debug mode is enabled and the corresponding enable bit is set. 












External breakpoint interrupt bit (development port, internal or external modules). Set as a 
result of the assertion of an external breakpoint. Causes debug mode entry if debug mode is 
enabled and the corresponding enable bit is set. 





Development port interrupt bit. Set by the development port as a result of a debug station 
nonmaskable request or when entering debug mode immediately out of reset. Causes debug 
mode entry if debug mode is enabled and the corresponding enable bit is set. 


36.5.2.2 Debug Enable Register (DER) 


The DER, shown in Figure 36-23, lets the user selectively enable events that can cause the 
processor to enter debug mode. Its reset value is Ox0200_2000. 


FPUVIE| DECIE 
reteset a) 





149 
Figure 36-23. Debug Enable Register (DER) 


DER protection is described in Table 36-15. 
Table 36-25. DER Field Descriptions 


Pee in 
a 


RSTE Reset interrupt enable bit 
ODebug mode entry is disabled (reset value) 
1Debug mode entry is enabled 


CHSTPE | Checkstop enable bit 
0 Debug mode eniry is disabled 
1 Debug mode entry is enabled (reset value) 


MCIE Machine check interrupt enable bit | 
0 Debug mode entry is disabled (reset value) 
1 Debug mode entry is enabled 
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Table 36-25. DER Field Descriptions (Continued) 


ce [en 
a 
[a [FRO [Peston roaiaie merino 

3 
: 
| 





























E Trace interrupt enable bit 
0 Debug mode entry is disabled 
E 


15— 


0 
3 
4 
16 
ri SEIE Software emulation interrupt enable bit 
8 
9 
0 
1 
8 


TR 
1 Debug mode entry is enabled (reset value) 


0 Debug mode entry is disabled (reset value) 
1 Debug mode entry is enabled 
ITLBMS | Implementation-specific ITLB miss enable bit 
DTLBMS | Implementation-specific DTLB miss enable bit 
E 
ITLBER | Implementation-specific ITLB error enable bit 
E 
DTLBER j; Implementation-specific DTLB error enable bit 
E 


2 LBRKE | Load/store breakpoint interrupt enable bit 
0 Debug mode entry is disabled 
1 Debug mode entry is enabled (reset value) 


IBRKE Instruction breakpoint interrupt enable bit 
30 EBRKE | External breakpoint interrupt enable bit 
31 | 


1 
s 
1 
2 
2 


DPIE Development port nonmaskable request enable bit 


36.5.2.3 Development Port Data Register (DPDR) 
The 32-bit development port data register (DPDR), SPR 630, resides in the development _ | 
port logic. It is used for data interchange between the core and the development system. The 

DPDR is accessed by using mtspr and mfspr and implemented using a special bus cycle 

on the internal bus. See Section 36.3.2.2.1, “Development Port Shift Register.” 
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IEEE 1149.1 Test Access Port 


The MPC850 provides a dedicated user-accessible test access port (TAP) that is fully 
compatible with the JEEE 1149.1 Standard Test Access Port and Boundary Scan 
Architecture. Problems associated with testing high-density circuit boards have led to 
development of this standard under the sponsorship of the Test Technology Committee of 
IEEE and the Joint Test Action Group (JTAG). The MPC850 implementation supports 
circuit-board test strategies based on this standard. 


The TAP consists of five dedicated signals, a 16-state TAP controller, and two test data 
registers. A boundary scan register links all device signals into a single shift register. The 
test logic, implemented using static logic design, operates independently of the device 
system logic. The MPC850 TAP implementation provides the capability to: 


e Perform boundary scan operations to check circuit-board electrical continuity. 


e Bypass the MPC850 for a given circuit-board test by effectively reducing the 
boundary scan register to a single cell. 


e Sample the MPC850 system signals during operation and transparently shift out the 
result in the boundary scan register. 


e Disable the output drive to signals during circuit-board testing. 


37.1 Overview 


The MPC850 TAP implementation includes a TAP controller, a 4-bit instruction register, 
and two test registers (a 1-bit bypass register and a 475-bit boundary scan register). The 
TAP interface consists of the following signals: 


e TCK—A test clock input to synchronize the test logic. 

e TMS—A test mode select input (with an internal pull-up resistor) that is sampled on 
the rising edge of TCK to sequence the TAP controller’s state machine. 

e TDI—A test data input (with an internal pull-up resistor) that is sampled on the 
rising edge of TCK. 

e TDO—A three-stateable test data output that is actively driven in the shift-IR and 
shift-DR controller states. TDO changes on the falling edge of TCK. 

¢ TRST—An asynchronous reset with an internal pull-up resistor that provides 
initialization of the TAP controller and other logic required by the standard. 
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The MPC850 TAP logic is shown in Figure 37-1 below. 


BOUNDARY SCAN REGISTER 





TDI 


i od 
INSTRUCTION APPLY & DECODE REGISTER 


4—BIT INSTRUCTION REGISTER e TDO 


— 
wv 
bar 


™S TAP CONTROLLER 
TCK 


Figure 37-1. Test Logic Block Diagram 


37.2 TAP Controller 


The TAP controller is responsible for interpreting the sequence of logical values on the 
TMS signal. It is a synchronous state machine that controls the operation of the JTAG logic. 
The value shown adjacent to each bubble represents the value of the TMS signal sampled 
on the rising edge of TCK. Figure 37-2 shows the MPC850 TAP controller state machine. 
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TEST LOGIC 
RESET 


0 


1 
qnaes > 


1 


0 





Figure 37-2. TAP Controller State Machine 


37.3 Boundary Scan Register 


The MPC850 scan chain consists of a 475-bit boundary scan register that contains bits for 

all signals, with the exception of the XTAL, EXTAL, and XFC pins, which are analog 

signals. An IEEE-1149.1 compliant boundary scan register has been included on the 

MPC850. This 475-bit boundary scan register can be connected between TDI and TDO 
when EXTEST or SAMPLE/PRELOAD instructions are selected. The boundary scan 

register is used for capturing data on the input signals, forcing fixed values on the output 

signals, and selecting the direction and drive characteristics (a logic value or high 

impedance) of the bidirectional and three-state signals. 
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Figure 37-3 shows the logic configuration for an output signal boundary scan cell. 


1 — EXTEST! CLAMP SHIFT DR TO NEXT CELL 
0 — OTHERWISE 





DATA FROM 
SYSTEM 
LOGIC 


TO OUTPUT 
BUFFER 


FROM LAST CELL CLOCK DR UPDATE DR 


Figure 37-3. Output Signal Boundary Scan Cell (Output Cell) 


Figure 37-4 shows the logic configuration for an observe-only input signal boundary scan 
cell. 


TO NEXT CELL 


DATA TO 
SYSTEM 
LOGIC 





CLOCK DR SHIFT DR 
FROM LAST CELL 


Figure 37-4. Observe-Only Input Signal Boundary Scan Cell (Input Cell) 





37-4 MPC850 Integrated Communications Microprocessor User’s Manual MOTOROLA 


Part VI. Debug and Test 


Figure 37-5 shows the logic configuration for an output control boundary scan cell. 


1 - Extest | Clamp 










0 — Otherwise 
Shift DR To Next Cell 
Output Control \ 
from System —-—-——- 
Logic ginal <) ll » 10 Output 
Buffer 




















From Last Cell Clock DR 
Update DR 


Figure 37-5. Input/Output Control Boundary Scan Cell (I/O Control Cell) 


Figure 37-6 shows the logic configuration of bidirectional signal boundary scan cells. 


From Last Cell 





Output Enable 
from System 1/0 Control 
Logic 









Output Data 











Input Data ~<——— 





ToNextCell To Next Pin Pair 
Figure 37-6. Bidirectional (I/O) Signal Boundary Scan Cell 
The value of the control bit controls the output function of the bidirectional signal. One or 


more bidirectional data cells can be serially connected to a control cell. Bidirectional 
signals include two scan cells for data (input and output buffers) and an I/O control block. 


It is important to know the boundary scan bit order and the signals that are associated with 
them. The bit order of the boundary scan chain (described in the MPC850 BSDL file) starts 
with the TDO output and ends with the TDI input. The shift register cell nearest TDO (first 
to be shifted in) is defined as bit 1 and the last bit to be shifted in is bit 475. 
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37.4 Instruction Register 


The MPC850 TAP implementation includes _ the Suplie instructions EXTEST, 
SAMPLE/PRELOAD, BYPASS and CLAMP. An optional public instruction (HI-Z) 
provides the capability for disabling all device output drivers. The MPC850 TAP 
implements a 4-bit instruction register (no parity). The 4-bit TAP instructions are executed 
during the update-IR controller state. The four instruction bits select the five unique 
instructions listed in Table 37-1. 


Table 37-1. Instruction Register Decoding 


EXTEST 





Note: BO (Isb) is shifted first. 


The instruction register is reset to all ones in the test-logic-reset controller state. Note that 
the reset state is equivalent to the BYPASS instruction. During the capture-IR controller 
state, the inputs to the instruction shift register are loaded with the CLAMP command code. 


37.4.1 EXTEST 


The external test (EXTEST) instruction enables the 475-bit boundary scan register. 
EXTEST also asserts an internal soft reset for the MPC850 system logic to force a known 
beginning internal state while performing external boundary scan operations. Through the 
TAP, the user is capable of scanning user-defined values into the output buffers, capturing 
values presented to input pins, and controlling the output drive of three-stateable output or 
bidirectional pins. For more details on the function and use of EXTEST, refer to the IEEE 
1149.1 standard. 


37.4.2 SAMPLE/PRELOAD 


The SAMPLE/PRELOAD instruction initializes the boundary scan register output cells 
before the boundary scan register is enabled by the EXTEST command. This initialization 
ensures that known data will appear on the outputs when entering the EXTEST instruction. 
If the SAMPLE/PRELOAD command was not issued prior to the EXTEST command the 
output signals will go to a random state when the boundary scan register is enabled and 
takes control of the output buffer. The SAMPLE/PRELOAD command ensures that the 
boundary scan register samples the current state of the output signal before it takes control 
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of the associated output buffer. The SAMPLE/PRELOAD instruction also provides an 
opportunity to obtain a snapshot of system data and control signals. 


Note that there is no internal synchronization between the TCK and CLKOUT; the user 
must provide some form of external synchronization between the JTAG operation at TCK 
frequency and the system operation CLKOUT frequency to achieve meaningful results. 


37.4.3 BYPASS 


The BYPASS instruction creates a shift register path from TDI through the bypass register 
to TDO, circumventing the 475-bit boundary scan register. This instruction is used to 
enhance test efficiency when a component other than the MPC850 becomes the device 
under test. The BYPASS instruction selects the single-bit bypass register as shown in 
Figure 37-7. 


SHIFT DR 


0 


TO TDO 
FROM TDI 





CLOCK DR 
Figure 37-7. Bypass Register 


When the bypass register is selected by the current instruction, the shift register stage 1s set 
to a logic zero on the rising edge of TCK in the capture-DR controller state. Therefore, the 
first bit to be shifted out after selecting the bypass register is always a logic zero. 


37.4.4 CLAMP 


The CLAMP instruction selects the single-bit bypass register as shown in Figure 37-7 
above, and the state of all signals driven from the system output pins is defined by the data 
currently contained in the boundary scan register. 


37.4.5 HI-Z 


The HI-Z instruction is provided as a manufacturer’s optional public instruction to avoid 
back driving the output pins during circuit-board testing. When the HI-Z instruction is 
invoked all output drivers, including the two-state drivers, are placed in a high impedance 
state. The HI-Z instruction also selects the bypass register. 


37.5 TAP Usage Considerations 


The control afforded by the output enable signals using the boundary scan register and the 
EXTEST instruction requires a compatible circuit-board test environment to avoid 
device-destructive configurations. The user must avoid situations in which the MPC850 
output drivers are enabled into actively driven networks. 
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37.6 Recommended TAP Configuration 


To ensure that the scan chain test logic is kept transparent to the system logic during normal 
operation, the TAP should be forced into the test-logic-reset controller state by keeping 
TRST or TMS continuously asserted. 





The TAP signals must be configured as follows to reset the scan chain logic: 


e If both the TAP and low power mode are never used, connect TRST to ground. 
e Ifthe TAP or low power mode is used, connect TRST to PORESET. 


e If power down mode (the lowest power mode, where Vppy is disabled) is used, 


connect TRST to PORESET through a diode (anode to TRST, cathode to — 
PORESET). 


The TMS, TDI, and TRST signals include on-chip pull-up resistors. TCK, however, does 
not have an on-chip pull-up or pull-down resistor; it should be pulled down through a 
resistor. 


To use the TAP to perform test operations, select the TAP functions in the hard reset 
configuration word for the signals TCK/DSCK, TDI/DSDI, TDO/DSDO; see 
Section 11.3.1.1, “Hard Reset Configuration Word.” 


37./ Motorola MPC850 BSDL Description 


The most current revision of the BSDL file for the MPC850 PowerQUICC is available at 
the Motorola web site (www.mot.com) in the MPCxxx Embedded PowerPC area. 
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Byte Ordering 


The MPC850 supports three byte-ordering conventions—big-endian (BE), true 
little-endian (TLE), and PowerPC™ architecture little-endian (PPC-LE). This chapter 
describes each of the three endian modes. Chapter 3, “Operand Conventions,” in PowerPC 
Microprocessor Family: The Programming Environments for 32-bit Microprocessors, 
provides a general overview of byte ordering and describes byte ordering for PowerPC 
microprocessors. 


A.1 Byte Ordering Overview 


For big-endian byte ordering, the most-significant byte (MSB) is stored at the lowest 
address while the least-significant byte (LSB) is stored at the highest address. This is called 
big-endian because the big end of the scalar comes first in memory. 


For true little-endian byte ordering, the LSB is stored at the lowest address while the MSB 
is stored at the highest address. This is called true little-endian because the little end of the 
scalar comes first in memory. | 


For PowerPC little-endian byte ordering (also referred to as ‘munged little-endian’), the 
address of data is modified so that the memory structure appears little-endian to the 
executing processor, when in fact, the byte ordering is big-endian. The address modification 
is called ‘munging’. Note that the term ‘munging’ 1s not defined or used in the PowerPC 
architecture specification. However, the term is commonly used to describe address 
modifications. The byte ordering is called PowerPC little-endian because PowerPC 
microprocessors use this method to operate in little-endian mode. 


A.2 MPC850 Byte-Ordering Mechanisms 


There are several byte-ordering mechanisms in the MPC850 that are controlled by 
programmable parameters. The MSR[LE] and MSR[ILE] bits control a 3-bit address 
modifier in the PowerPC core. The DC_CST[LES] bit controls a 2-bit address modifier in 
the core and a 2-bit address modifier and byte lane swapper in the SIU. The FCR[BO] field 
of each peripheral (SCCs, SMCs, SPI, °C, PIP, or IDMA) controls a 3-bit address modifier 
in the SDMA. Table A-1 correlates the programmable parameters with the byte-ordering 
modes of operation. 
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Table A-1. Byte-Ordering Parameters 
MSR[LE] or 


e |» |= [=| 
a 
ee ee 














Byte-Ordering Mode 





PPC-LE 


Note: The MPC850 powers up in BE mode. 


A.3 BE Mode 


As shown in Table A-1, the MPC850 powers up in BE mode. In BE mode, the caches, 
internal registers, the U-bus, and the external bus, all use big-endian byte ordering. In BE 
mode, no address modification nor data-byte-lane swapping is performed by any of the 
byte-ordering mechanisms of the MPC850 . 


The PowerPC architecture defines two bits in the MSR for specifying byte ordering —LE 
(little-endian mode) and ILE (exception little-endian mode). For the MPC850 , these bits 
only control the addresses generated by the PowerPC core. The LE bit specifies the endian 
mode for normal core operation and ILE specifies the mode to be used when an exception 
handler is invoked. That is, when an exception occurs, the ILE bit (as set for the interrupted 
process) is copied into MSR[LE] to select the endian mode for the context established by 
the exception. For both bits, a value of 0 specifies BE mode (or TLE mode, depending on 
DC_CST[LES]), and a value of 1 specifies PPC-LE mode. 


A.4 TLE Mode 


When the MPC850 operates in TLE mode, the external bus uses little-endian byte ordering, 
sO any external agents should use little-endian byte ordering to access memory. Note 
however, that internal to the MPC850 , the caches and internal registers use big-endian byte 
ordering. The byte-ordering mechanisms for TLE mode are shown in Figure A-1. 
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Figure A-1. TLE Mode Mechanisms 


For TLE mode, MSR[LE] and MSR[ILE] should be cleared as in BE mode. (This disables 
the 3-bit address munging used in PPC-LE mode. See Section A.5, “PPC-LE Mode,” for 
more information.) 


For TLE mode, DC_CST[LES] should be set. When DC_CST[LES] is set, the physical 
address is modified before the data cache or load/store unit accesses the internal U-bus. The 
two low-order address bits of the effective address are exclusive-ORed (XOR) with a 
two-bit value that depends on the length of the operand (1, 2, or 4 bytes), as shown in 
Table A-2. This process is called 2-bit munging.’ 


Table A-2. TLE 2-bit ‘Munging 


ae Sa (7 


Since all instructions are 4 byte words, no address modifications by the instruction cache 
are necessary. 
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The munged physical address is passed to the internal U-bus, and the specified width of data 
is transferred. Only the address is modified, not the byte order. Munging makes it appear to 
the core that individual aligned scalars on the U-bus are in little-endian order, when in fact, 
they are actually in big-endian order. This allows the core to access data in the inherently 
big-endian internal registers with apparent little-endian byte-ordering. However, when 
DC_CST[LES] is set, for any access originating from the PowerPC core, the SIU 
unmunges the address and swaps the bytes of data within each word at the external 
bus/U-bus boundary. The byte swapping is shown in Figure A-2. 





0 7 8 15 16 23 24 31 0 7 8 15 16 23 24 31 


Figure A-2. Byte Swapping 


The unmunging and byte swapping places all external accesses by the PowerPC core into 
true little-endian byte order. Note that the bit ordering remains unchanged — that 1s, bit 0 is 
always the msb, and bit 31 is always the Isb. 


The communication peripherals (SCCs, SMCs, SPI, °C, PIP, or IDMA) transfer data as 
bytes (bytes are received one at a time and transmitted one at a time). Byte transfers have 
no inherent endianess—they are neither big- nor little-endian. For TLE-mode, the 
FCR[BO] parameter of each peripheral should be programmed to Ob1x (that is, either 0b10 
or 0b11). Note that the SIU does nothing (no unmunging, no byte-swapping) to accesses 
originating from the SDMA controller. 


A.4.1 TLE Mode System Examples 


The following tables describe how to handle the little-endian program or data in the 
little-endian system that is built around the MPC850 for various port sizes. 
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Table A-3. Little-Endian Program/Data Path Between the 
Register and 32-Bit Memory 


Data in the U-bus and External Bus Little-Endian 
Register Cache Format Format Program/Data 


Half-word 
Half-word 
Byte 
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Table A-4. Little-Endian Program/Data Path Between the 
Register and 16-Bit Memory 


Data in the U-bus and External Bus Little-Endian 
Register Cache format Format Program/Data 
L 
Ss 
B 


42/13}44/ 11 ee 


le boo Clete 
Emm Se 
2 Z Zane 





wl no} — |] — 
MEM] MT & 


?] 


~~ 


—h —_, hk Ww 











MOTOROLA Appendix A. Byte Ordering A-5 


Appendixes 


Table A-5. Little-Endian Program/Data Path between the Register and 


| 





8-Bit Memory 


External —— Little-Endian 
—— Program/Data 
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A.5 PPC-LE Mode 


For PPC-LE mode, the caches, the U-bus, and the external bus use big-endian byte ordering 
with munged addresses. The byte-ordering mechanisms for PPC-LE mode are shown in 


Figure A-3. 
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Figure A-3. PPC-LE Mode Mechanisms 


For PPC-LE mode, MSR[LE] and MSR[ILE] should be set. When the MSR[LE] is set, the 
effective address is modified (munged) by the core before being used to access the caches 
(or memory for caching-inhibited accesses). The three low-order address bits of the 
effective address are exclusive-ORed (XOR) with a three-bit value that depends on the 
length of the operand (1, 2, or 4 bytes), as shown in Table A-6. This process is called *3-bit 
munging.’ 


Table A-6. PPC-LE 3-bit Munging 


ne ee 
rors 


Note that the MPC850 does not support 8-byte scalars 






The munged physical address is passed to the cache or to external memory, and the 
specified width of data is transferred (in big-endian order—that is, MSB at the lowest 
address, LSB at the highest address). In PPC-LE mode, only the address is modified, not 
the byte order. Munging makes it appear to the core that individual aligned scalars are 
stored in little-endian order, when in fact, they are stored in big-endian order, but at 
different byte addresses within double words. Note that the instruction and data caches 
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operate less efficiently when address munging is performed on cache accesses. Some 
performance degradation should be expected when the MPC850 is operating in PPC-LE 
mode 


MSR[ILE] is used to set the endian mode of the core during exception handling. When an 
exception occurs, MSR[ILE] is copied into MSR[LE] to select the endian mode for the 
context established by the exception. 


For PPC-LE-mode, the FCR[BO] parameter of each peripheral (SCCs, SMCs, SPI, °C, 
PIP, or IDMA) should be set to 0b01. The SDMA controller examines the BO parameter 
and, if set to ObO1, performs a 3-bit munge (XOR with 0b111) on every byte address of 
transmitted or received data as in Table A-6. 


A.5.1 I/O Addressing in PPC-LE Mode 


For a system running in BE or TLE mode, both the MPC850 and the memory subsystem 
recognize the same byte as byte 0. However, this is not true for a system running in PPC-LE 
mode because of the munged address bits when the MPC850 accesses external memory. 


For I/O transfers in PPC-LE mode to transfer bytes properly, they must be performed as if 
the bytes transferred were accessed one at a time, using the little-endian address 
modification appropriate for the single-byte transfers (that is, the lowest order address bits 
must be XORed with 0b111). This does not mean that I/O operations in PPC-LE systems 
must be performed using only one-byte-wide transfers. Data transfers can be as wide as 
desired, but the order of the bytes within double words must be as if they were fetched or 
stored one at a time. That is, for a true little-endian I/O device, the system must provide a 
mechanism to munge and unmunge the addresses and reverse the bytes within a 
doubleword (MSB to LSB). 


A load or store that maps to a control register on an external device may require the bytes 
of the register data to be reversed. If this reversal is required, the load and store with 
byte-reverse instructions (Ihbrx, lwbrx, sthbrx, and stwbrx) may be used. 


A.6 Setting the Endian Mode Of Operation 


As shown in Table A-1, the MPC850 powers up in BE mode. The endian mode should be 
set early in the initialization routine and remain unchanged for the duration of system 
operation. To switch between the different endian modes of operation, the core must run in 
serialized mode and the caches should be disabled. It is not recommended that you switch 
back and forth between modes. 


To switch the system from BE to PPC-LE mode, the MSR[LE] and MSR[ILE] bits should 
be set using an mtmsr instruction that resides on an odd word boundary (A[29] = 1). The 
instruction that is executed next will be fetched from this address plus 8. If the mtmsr 
instruction resides on an even word boundary (A[29] = 0), then the instruction will be 
executed twice due to the address munging of PPC-LE mode. | 
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To switch the system from PPC-LE to BE mode, the MSR[LE] and MSR[ILE] bits should 
be cleared using an mtmsr instruction that resides on an even word boundary (A[29] = 0). 
The instruction that is executed next will be fetched from this address plus 12. 


To switch the system to TLE mode, DC_CST[LES] should be set using an mtspr 
instruction that resides on an even word boundary (A[29] = 0). Further instructions should 
reside in the little-endian format of the external system memory or in the big-endian format 
of the internal memory (if it exists). 


The buffer descriptors for the peripherals contain the FCR[BO] parameters for the SDMA 
controller. The BO parameter should be set to the required endian format prior to activating 
the associated peripheral. 
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Appendix B 
Serial Communications Performance 


Due to the architecture of the MPC850, the overall performance of the serial channels 
cannot be stated in absolute terms. The serial channels of the MPC850 can be programmed 
in many different modes, which require different degrees of processing. There are several 
individual bottlenecks in the system, with their own specific considerations. These are 
described in the following sections. 


B.1 Serial Clocking (Peak Rate Limitation) 


The maximum rate at which a serial channel can be clocked is governed by the 
synchronization hardware of the serial channels. The rate at which the serial channel can be 
clocked depends on the physical interface of the channel. Examples include: 


e maximum clocking rate for an SCC connected to a dedicated set of pins (NMSI 
mode)=S YNCCLK/2 


e maximum clocking rate for the TDM channel=S YNCCLK/2.5 
For limitations of other channels, refer to the appropriate chapter of the manual. 


SYNCCLK is a programmable clock rate which is derived from the system frequency; see 
Chapter 14, “Clocks and Power Control.’ At its maximum rate, it is equal to the system 
frequency. 


The maximum serial clock rate is a limitation on the peak data rate. This is the maximum 
rate at which the receiver or transmitter hardware can transfer data between its internal 
FIFO and the serial line. However, this rate is higher than the rate at which data in these 
internal FIFOs can be processed by the CPM and transferred to system memory. Therefore, 
this peak rate can only be maintained for short bursts which do not exceed the internal FIFO 
depth. The serial clocks must also be turned off between these bursts. The FIFOs of the 
SCCs are 32 bytes for SCC2 and 16 bytes for SCC3. The SMCs and SPI are 
double-buffered, and thus have an effective FIFO depth of two characters. The USB FIFOs 
are 16 bytes. 
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To summarize, the architecture of the MPC850 allows the serial channels to handle 
high-speed bursts of data for short periods of time subject to their internal FIFO sizes. If 
transfers are sufficiently short, and if serial clocks are turned off between the transfers, then 
these individual transfers can be performed at up to the peak rate. Over time, however, the 
average amount of data transferred must not exceed the average CPM processing rate. 


If any of the conditions outlined above are not satisfied, then the rate at which the serial 
channels are clocked must not exceed the rate at which the CPM can process data from 
them. In other words, the average rate limitation must also be treated as the peak rate 
limitation. 


The I7C channel is the only exception to these rules. Its maximum serial transfer rate is 
limited by its hardware, not by the rate at which the CPM services it. At its maximum 
transfer rate, it will only consume 25% of the CPM bandwidth. 


B.2 Bus Utilization 


Given the width and clock speed of the system bus of the MPC850, bus utilization is not a 
critical system limitation, considering the data rates supported by the MPC850. 
Specifically, the peak system bus transfer rate of a SOMHz MPC850 (using single-beat 
transfers to zero wait-state memory) is 800Mbps, whereas the maximum aggregate serial 
data rate supported at that frequency is usually less than SOMbps. 


However, whereas bus utilization is not a major consideration, bus latency can be. Extreme 
periods of bus latency could potentially cause a FIFO to overrun or underrun. Where this is 
a more critical issue, some specific recommendations are made. 


B.3 CPM Bandwidth (Average Rate Limitation) 


The communications processor module (CPM) is a single shared resource used by all of the 
serial channels. It handles low-level protocol processing tasks and manages DMA for all of 
them. In the architecture of the MPC850, the CPM is the central communications 
processing engine, to which the individual serial controllers (SCC, SMC, SPI, LC, and 
USB) make requests for service. Therefore, the serial channels must not request more 
service than the CPM can provide; else, FIFO underrun or overrun errors will result. 


The amount of processing required by a particular serial channel depends on the mode in 
which the channel is configured, and the maximum rate at which the channel requests 
service. [While this rate is usually equivalent to the serial clocking rate, under certain 
conditions the serial clocking rate could be higher; this is because the FIFOs of the serial 
channels can provide a ‘local averaging’ effect on the data rate, and thus can handle short 
bursts. See Section B.1, “Serial Clocking (Peak Rate Limitation).”] 
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B.3.1 Performance of Serial Channels 


The table provided in this section lists the data rates supported by the CPM for particular 
channels in different modes. These figures assume that the serial channel in question is the 
only channel in operation. Individual channels operating at the data rate quoted would 
consume 100% of the CPM bandwidth. 


The performance available from different serial channels in different protocols varies 
greatly. This is due to the amount of overall processing required by the protocol and by the 
split between hardware-assist provided in the serial channel and processing performed in 
the CPM by microcode. For example: 


e AnSCCin UART mode provides more processing in the SCC hardware, whereas an 
SMC in UART mode is more reliant on the CPM. Therefore, the performance of an 
SCC in UART mode is greater. 


Maximum data rates are given for most channels as full duplex. Channels operating in half 
duplex will require only half the CPM service, and thus the maximum data rates supported 
for these channels doubles. 


Managing DMA for the serial channels is a significant portion of the CPM processing. 
Therefore, because channels with larger frame sizes require the CPM to access the buffer 
descriptors less often, these channels experience higher performance. An example of this 
shown in the table below is an SCC in HDLC mode; a channel with a minimum frame size 
of 64 bytes has better performance than one with a minimum frame size of 5 bytes. 


The performance figures listed in Table B-1 are for a 25 MHz system clock only. In general, 
performance scales linearly with frequency; an MPC850 with a 50 MHz system clock 
would support twice the quoted data rate. Thus, a combination of serial channels and 
protocols which are beyond the MPC850’s performance scope at 25 MHz may be possible 
at SO MHz. 


Performance figures quoted in Table B-1 assume worst-case conditions. Worst-case 
conditions are a steady stream of minimum-size frames. 
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Table B-1. MPC850 Serial Performance at 25 MHz 


Protocol _ Speed [see note 2] 


SCC in transparent | 8 Mbps FD 
SCC in HDLC (5 byte minimum frame size) 18 Mbps FD — 


SCC in HDLC (64 byte minimum frame size) 11 Mbps FD | 


SCC in UART 2.4 Mbps FD 
SCC in Ethernet 22 MbpsHD 
SCC in Ethernet 11 Mbps FD | 


SCC in BISYNC 1.5 Mbps FD 


~ SCC in asynchronous HDLC 
SCC in high-speed IrDA (same as transparent HD) | 
SCC in medium-speed IrDA (same aS HDLC HD) }i6Mbps 
SCC in low-speed IrDA (same as asynchronous HDLC HD) p6Mbps 


SMC in transparent 1.5 Mbps FD 


SMC in UART | 220 Kbps FD 


SCC in Profibus [optional RAM microcode] 
SCC in SS#7 [optional RAM microcode] | |6MbpsFD CS 


SCC in SS#7 [optional RAM microcode] 8 Mbps FD 
[without scrambling] | 

SCC in SS#7 [optional RAM microcode] 5.5 Mbps FD 
[with scrambling] 


Note: 


1.17C is a special case. Its performance is limited by its hardware, not by the CPM. An I?C 
port operating at 520 Kbps would consume only 25% of the CPM bandwidth of an MPC850 
operating at 25 MHz. 


2.Performance scales linearly with system frequency. 

3. FD indicates full-duplex; HD indicates half-duplex. 

4. Ethernet full and half duplex modes are quoted separately merely to highlight the feature. 
5. SPI is inherently full-duplex, and it is therefore not necessary to mark it as So. 


B.3.2 IDMA Considerations 


Although the IDMA channels are implemented in microcode by the CPM, they need not 
necessarily be calculated into the CPM bandwidth. If IDMA is not a time-critical task, then 
its priority can be programmed to be the lowest of the CPM tasks. If this is done, IDMA is 
treated as a background task and serviced only when other channels do not require service. 
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If IDMA is configured to be a higher-priority task, then its transfers must be considered 
when calculating demands on the CPM bandwidth. Table B-2 provides performance 
information for the IDMA channels in their different modes. Its use is similar to the table 
provided for the serial channels (Table B-1). 


Table B-2. IDMA Performance at 25 MHz 


IDMA memory to memory 
IDMA memory to memory with burst aligned source/dest sadraés. p104MByteis 
IDMA dual address, peripheral to memory 
IDMA dual address, memory to peripheral 
IDMA single address, peripheral to memory 
IDMA single address, memory to peripheral 


Note: 
1.Performance scales linearly with device operating frequency. 
2.IDMA transfer rates are independent of bus cycle length. 





























B.3.3 Performance Calculations 


Special configurations verified by experiment. 


The performance figures quoted in Table B-1 can be used to estimate the overall CPM 
bandwidth required in a particular system configuration. To calculate the total system load, 
add the CPM utilization from every channel together. Assuming approximately linear 
performance versus frequency, the general problem reduces to taking simple ratios: 


serial rate, serial rate, 


CPM Utilization = ( 


max serial rate, max serial rate, 


For example, since a 25-MHz MPC850 running Ethernet (theoretically) at 22 Mbps 


consumes approximately 100% of the CPM bandwidth, what bandwidth does a (practical) 
10-Mbps channel require”? 


CPM Utilization = __Serial rate Ie 0.45 
max Serial rate oi) 


The above equation shows the 10-Mbps channel requiring 45% of the CPM bandwidth of 
a 25-MHz MPC850. 


A spreadsheet tool for performing serial performance calculations has been developed and 
is available on the world-wide web site at http://www.mot.com/netcomm. It is entitled 
“CPM Performance Spreadsheet” and is located in the Engineer’s Toolbox. 
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Please note that CPM load estimation is a linear approximation to a somewhat nonlinear 
phenomenon, and cannot be relied upon to be exact. When performance estimations 
approach the maximum loading (i.e. greater than approximately 95%), the user should test 
the system on target hardware to determine the exact load. Conversely, some system 
configurations that calculate to greater than 100% by these equations have been verified by 
experiment. | | 


More examples of CPM bandwidth calculations follow: 


Example #1: 


MPC850 (at 25 MHz) operating 1 x 10 Mbps Ethernet in half duplex, 1 x 38.4 Kbps SMC 
UART, 1 x 57.6 Kbps SMC UART, and a 1.5-Mbps USB. The following equation applies: 


10\ 38.4 57.6 1.5 | 
(33) * (320) * (320) * (34) = 9993 (=D 
Because the CPM utilization is greater than 95%, the configuration should be verified in 
hardware. 
Example #2: 


MPC850 (at 25 MHz) with a block of data transferred by IDMA at 512 Kbytes/s to a 32-bit 
peripheral, one asynchronous HDLC at 1Mbps, one SMC UART at 57.6 Kbaud, and the 
USB at 1.5 Mbps. 


0.512 1 57.6 1.5 
———— + — + “2_ + — = 0. 
5 3 220 24 nee 
In the case of IDMA, this process calculates the peak CPM utilization, not the sustained 
rate. By nature, IDMA transfers occur at random intervals and are not consistent bit rates 


when compared to the serial channel operation. 


Example #3: 


MPC850 (at 40 MHz) operating 1 x 10 Mbps Ethernet in half duplex, and one 115.2 Kbps 
SMC UART. The following equation applies: 


115.2 |_ 
A mee | 0.98 x55 = 0.61 
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Register Quick Reference Guide 


This section provides a brief guide to the core registers. 


C.1 PowerPC Registers— User Registers 


The MPC850 implements the user-level registers defined by the PowerPC architecture 
except those required for supporting floating-point operations (the floating-point register 
file (FPRs) and the floating-point status and control register (FPSCR)). User-level, 
PowerPC registers are listed in Table C-1 and Table C-2. Table C-2 lists user-level 
special-purpose registers (SPRs). 


Table C-1. User-Level PowerPC Registers 


oe ee ee 
General-purpose | GPRs | The thirty-two 32-bit (GPRs) are used for source User 
registers | | and destination operands. 
Condition register See Section 4.1.1.1.1, “Condition Register User | Only mterf 
|(CR).” | 


Table C-2 lists SPRs defined by the PowerPC architecture implemented on the MPC850. 
Table C-2. User-Level PowerPC SPRs 


SPR Number | | | 
— = =~ Name | Comments Serialize Access 
Decimal SPR [5-9] | SPR [0-4] 
| | 00000 00001 | XER See Section 4.1.1.1.3, | Write: Full sync 
| “XER.” Read: Sync relative to load/store operations 
00000 | 01000 LR See the Programming | No 
Environments Manual 
/ gooo0o0 | 01001 CTR = |See the Programming | No 
: Environments Manual 












1 
| 268 01000 | 01100 |TBLread‘|Section 10.9, “The | Write (as a store) 
at | PowerPC Timebase.” 

| 260 01000 | 01101 |TBU read 2 


1 Extended opcode for mftb, 371 rather than 339. 
2 Any write (mtspr) to this address causes an implementation-dependent software emulation exception. 
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C.2 PowerPC Registers—Supervisor Registers 


All supervisor-level registers implemented on the MPC850 are SPRs, except for the machine state 
register (MSR), described in Table C-3. 


Table C-3. ns PowerPC Registers 


|Description — Comments Serialize Access 


Machine state register bl Section 4.1.2.3.1, “Machine State Register | Write fetch sync 
(MSR).” : 


Table C-4 lists supervisor-level SPRs defined by the PowerPC architecture. 





Table C-4. Supervisor-Level PowerPC SPRs 


SPR Number | | 
Comments 
00000 10010 |DSISR See the Programming Environments 
Manual and Section 4.1.2.1, “DAR, 
DSISR, and BAR Operation.” 
00000 10011 See the Programming Environments 
Manual and Section 4.1.2.1, “DAR, 
DSISR, and BAR Operation.” store operations 
00000 10110 See Section 10.8.1, “Decrementer Write 
Register (DEC),” and in Chapter 14, 
“Clocks and Power Control” 
00000 11010 |SRRO See SRRO settings for individual Write 
exceptions in Chapter 6, “Exceptions.” 
00000 11011 SRR1 See SRR1 settings for individual Write 
exceptions in Chapter 6, “Exceptions.” 


01000 10000 |SPRGO  |See the Programming Environments | Write 
Manual. 

01000 10001 SPRG1 

01000 10010 SPRG2 


01000 [sPRas 
01000 11100 TBL write! | See Section 10.9, “The PowerPC 


Timebase,’ and ae 14, “Clocks 
01000 11111 Section 4.1.2.3.2, “Processor Version | No (read-only register) 
Register.” 


1 Any read (mftb) to this address causes an implementation-dependent software emulation exception. 










Serialize Access 







Write: Full syne 
Read: Sync relative to 
load/store operations 


















Write: Full sync 
Read: Sync relative to load/ 



























Write (as a store) 





C.3 MPC850-Specific SPRs 


Table C-2 and Table C-5 list SPRs specific to the MPC850. Debug registers, which have 
additional protection, are described in Chapter 36, “System Development and Debugging.” 
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Supervisor-level registers are described in Table C-5. 


Table C-5. MPC850-Specific Supervisor-Level SPRs 


SPR Number | 
: ? - Name Comments 
SPRI5-9] | SPR[O-4] 
| ! 00010 | 10000 {EIE See Section 6.1.5, “Recoverability {| Write 
| | after an Exception.” 
631 | 
638 
560 | 
D 


Serialize Access 











| 6st | 10011 | 10111 |DPIR’ | Fetch-only 

| 100711 {| 11110 | IMMR | Section 10.4.1, “Internal Memory Write (as a store) 
| : | | Map Register (IMMR).” 
| | 10001 | 10000 | IC_CST Section 7.3.1, “Instruction Cache Write (as a store) 
| | Control Registers” 

| 40001 ; 10001 j|IC_ADR Section 7.3.1, “Instruction Cache Write (as a store) 

| | Control Registers” 

a Section 7.3.1, “Instruction Cache Write (as a store) 

Control Registers” 


| 10001 | 11001. |DC_ADR | Section 7.3.2, “Data Cache Control _| Write (as a store) 
| | | | Registers” | 
| 10001 | 11010 = |DC_DAT Section 7.3.2, “Data Cache Control Write (as a store) 
| Registers” | 
784 | 11000 | 10000 | Section 8.8.1, “IMMU Control Register | Write (as a store) 
: | _CTR)” 


Section 8.8.10, “MMU Access | Write (as a store) 
| Protection Registers 
| (Mi_AP/MD_AP)” 


Section 8.8.3, “IMMU/DMMU Effective | Write (as a store) 
| Page Number Register (Mx_EPN)” 
789 | Section 8.8.4, “IMMU Tablewalk Write (as a store) 
| Control Register (MI_TWC) 
790 | 11000 | | Section 8.8.6, “IMMU Real Page Write (as a store) 
| Number Register (MI_RPN)” 
| 816 | 11001 | 10000 | Section 8.8.12.1, “IMMU CAM Entry _ | Write (as a store) 
| | Read Register (MI_CAM)” 
( 
( 


| 
? ( 
561 | | | ( 
Section 7.3.2, “Data Cache Control 
| | Registers” 
= r | = : cee a 
570° _DAT ( 
( 












E 
'?) 
4 
Be) 



















| (MI_L1DL2P) 


817 | 11001 | 10001 | MI_RAMO | Section 8.8.12.2, “IMMU RAM Entry | Write (as a store) — 
| | Read Register 0 (MI_RAMO)” 
818 | 11001 | 10010 |Mi_RAM1 Section 8.8.13, “DMMU RAM Entry Write (as a store) 
| Read Register 1 (MD_RAM1)” 


| 792 | 11000 } 11000 |MD_CTR Section 8.8.2, “DMMU Control Write (as a store) 
| | | Register (MD_CTR).” 





anion 





asasenanerseaetmanaseenepnece 








LEPESANT NOREEN NR RESETS RESET RE PO eee st 
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Table C-5. MPC850-Specific eupervigorleve! SPRs (Continued) 


| SPRNumber Number 
Comments 
=ocsles SPR[5-9] | SPR[O-4] 


793 11000 11001 M_CASID Section 8.8.9, “MMU Current Address | Write (as a store) 
Space ID Register (M_CASID)” 


794 11000 11010 |MD_AP Section 8.8.10, “MMU Access Write (as a store) 
Protection Registers 
(MI_AP/MD_AP)” 
795 11000 11011 MD_EPN Section 8.8.3, “IMMU/DMMU Effective | Write (as a store) 
Page Number Register (Mx_EPN)” 
796 11000 11100 M _TWB Section 8.8.8, “MMU Tablewalk Base | Write (as a store) 
(MD_L1P) Register (M_TWB)” 
797 11000 11101 MD_TWC Section 8.8.5, “DMMU Tablewalk Write (as a store) 
(MD_L1DL2P) Control Register (De TWC)” 
798 11000 11110 |MD_RPN Section 8.8.7, “DMMU Real Page | Write ( (as a store) 
Number Register (MD_RPN)” 
799 11000 11111 M_TW (M_SAVE) j Section 8.8.11, “MMU Tablewalk Write (as a store) 
Specia! Register (M_TW)” 
824 11001 11000 |MD_CAM Section 8.8.12.4, “DMMU CAM Entry Write ( (asa store) 
Read Register (MD_CAM)” 
825 11001 11001 MD_RAMO Section 8.8.12.5, “DMMU RAM Entry | Write (as a store) 
Read Register 0 (MD_ Bey 
826 11001 11010 |MD_ RAM Section 8.8.13, “DMMU RAM Entry Write (as a store) | 
Read Register 1 (MD_RAM1)” 


' Fetch-only register; nitsor is ignored; using mfspr gives an undefined value. 









Serialize Access 
























Debug-level registers are described in Table C-6. These registers are described in 
Section 36.5.1, “Development Support Registers.” 


Table C-6. MPC850-Specific poougmever SPRs 










SPR Number 


na 
=< 
= 
= 





Serialize Access 
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Table C-6. MPC850-Specific Debug-Level SPRs (Continued) 


SPR Number 
SPR[0-4] 


152 00100 11000 }|CMPE Write: Fetch sync 
Read: Sync relative to load/store operations 
153 00100 CMPF Write: Fetch sync 
Read: Sync relative to load/store operations 
CMPG Write: Fetch sync | 
Read: Sync relative to load/store operations 















Serialize Access 









00100 | 11010 
155 00100 11011 CMPH Write: Fetch sync 
Read: Sync relative to load/store operations 
156 00100 11100 |LCTRL41 Write: Fetch sync 
Read: Sync relative to load/store operations 
157 00100 11101 LCTRL2 Write: Fetch sync 
Read: Sync relative to load/store operations 


00100 11110 |JICTRL Fetch sync on write 


159 00100 11111 | BAR Write: Fetch sync 
Read: Sync relative to load/store operations. See 


Section 4.1.2.1, “DAR, DSISR, and BAR Operation.” 


10110 DPDR Read and Write 







630 10011 
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Instruction Set Listings 


This appendix lists the MPC850’s instruction set as well as the additional PowerPC 
instructions not implemented in the MPC850. Instructions are sorted by mnemonic, 
opcode, function, and form. Also included in this appendix is a quick reference table that 
contains general information, such as the architecture level, privilege level, and form, and 
indicates if the instruction is 64-bit and optional. 


Note that split fields, that represent the concatenation of sequences from left to right, are 
shown in lowercase. For more information refer to Chapter 8, “Instruction Set,” in The 
Programming Environments Manual. 


D.1 Instructions Sorted by Mnemonic 


Table D-1 lists the instructions implemented in the MPC850 in alphabetical order by 
mnemonic. 


Table D-1. Complete Instruction List Sorted by Mnemonic 





Key: 
| | Reserved bits Instruction not implemented in the MPC850 
Name 0 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


addx 





addcx 
addex 
addi 
addic 
addic. 
addis 
addmex 
addzex 


andx 





SOROS RIGGS PSE SE SS SESSILIS PSE BS SSIS SEES SS SES BSS SSS SS SSS ESBS EEO LSS SERS EEE ERIE EES PIPE AEE RIAA ARAN Er ray it SAGER AE A AO RC OO OE OO OOO OIE OOOO SOO OLE ERR I OOO TOON COLO COIR SOLOS 
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6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 


a 
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6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


eS 
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6 7 8 9 10 11 12 13:14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 
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6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





534 


1 


3 


iwbrx 


32 


Zz 


Ww 


33 


lwzu 


See 


ae 
ae ae 
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6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 





6 


53 





3 
38 





srawix 
Srwx 
stb 


mulhwux 
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6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 








D-7 


Appendix D. Instruction Set Listings 


MOTOROLA 


Appendixes 


6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


Name 0. 


es 


subfzex 





: Supervisor-level instruction 

2 Supervisor- and user-level instruction 

3 Load and store string or multiple instruction 

4 64-bit instruction 

* Optional in the PowerPC architecture 

6 Floating-point instructions are not supported by the MPC850. 
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D.2 Instructions Sorted by Opcode 


Table D-2 lists the instructions defined in the MPC850 in numeric order by opcode. 


Key: 
| | Reserved bits 


Table D-2. Complete Instruction List Sorted by Opcode 


Instruction not implemented in the MPC850 





Name 0 5 6 ¢ 8&8 9 iO 11 i2 i3 14 15 16 17 18 19 20 27 22 23 24 2 


twi 000011 TO 


an 
ive) 
(o>) 
Po 
~N 
ho 
CO 
ho 
ise} 
{ee} 
io) 
Go 

a 





mulif ooo11? | > 


cmpli 001010 crf 


addi 001110 


Oo 


Oe 
a rr eee 
aie 


a8 















addis 001111 





lex 010000 


sc| 010001 o 00: )0 
bx} 010010 
mrt] 010011 | oD | 00 


belrx 010011 BO 








crxor 010011 


crnand 010011 
crand 010011 
creqv 010011 - crbD 
crore 010011 croD 


cror 010011 crbD 
bectrx 010011 BO 
riwimix 010100 S 
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5 6 7 8 9 10 11 12 138 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 


Re 


ee 


SH 


A 


S 


010101 
010111 
011000 


riliwnmx 


rlwinmx 


UIMM 


r 


Oo 


UIMM 


011011 
| 011100 
011101 


Is 


xor 


and 


IS 


and 


Beets 





SSS 





011111 
011111 
subfcx 011111 


mp 


Cc 





0000010111 





0000000100 
000001000 
000001011 


ee ee ee 
a ee ee: 








Ww 


t 
addcx 
mulhwux 
mfcr 
lwarx 





0000011000 





011111 





0000011100 








win] ovr | of A [8 fe 





cmpl] 0111114 


000101000 


dcbst 011111 






0000110111 
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Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 










P89] coro0r08 


Ibzux 011111 
norx 011111 
subfex 011111 
addex 011111 


mtcerf 011111 









stwex. 011111 


stwx 0111171 







011111 


~o0000 011001000 
OE 011001010 R 


subfzex 011111 
addzex 011111 


mtsr 011111 


stbx 011111 
subfmex 0111141 


rE 
3 


addmex 011111 
mullwx 011111 
mtsrin 011111 
dcbtst 011111 


stbux 011111 


0011110111 
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5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 


100001010 


= 
_ 
= 
_ 
a 
io) 


addx 


io) 
= 
_ 
>) 
= 
=) 
© 
© 
_ 
© 


oO 
aa 
© 
© 
So 
5 
- 
Oo 
oO 
© 
5 
io) 


mt 
= 
- 
ou 
Oo 


- |r 
be Ob 
- [3s 
ripe, 
- |r 
oO;o 


debt 





Ihzx 


eqvx 


0100110010 





a 
_ 
— 
fom 
Oo 


a 
— 
ps 
>) 
ba 
- 
oO 
Oo 
v4 
o 
: 
bee - 
r bad 
” - 
- - 
- - 
oO | oO 
x 
=} 
N 
= 


tlbie !> 


ee ae ae ee 


0100110110 


wx 


eci 


011111 


xorx 


0101010011 


011111 


011111 


mfspr ~ 


0101010111 


ihax 








011111 


mftb 





1110111 


010 


011111 


011111 


ihaux 





0110010111 


sthx 








ai 


orex 


ecowx 





111001011 








0111010011 


0111010110 


0110111100 


Me 
oO 
” 


. 


011111 
011111 
debi] 011111 | 





rx 


sthux 
Oo 





divwux 
mtspr ” 








B 
B 
ee ie 


divwx 011111 ee. 


0111011100 


nandx 





111101011 


1000000000 





011111 


011111 
lwbrx 011111 


1000010101 


Iswx 3 








1000010110 
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5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 
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1000011000 
1001010011 
1100111000 


jo) 
- 
— 
io) 
_ 
foo) 
= 
© 
= 
— 


oOo} oO 
5 el oe 
- | oO 
oOitinr 
be Oe ol 
oO} oO 
oO | Oo 
- |r 
rier 
— lr 


io) 
—_ 
oO 
_ 
= 
— 
© 
- 
- 
= 


io) 
baal 
r 
jo) 
- 
© 
e 
™ 
- 
baad 
: 


1001010101 
1001010110 
1111110110 





1010010101 0 
1010110111 : 


A 
a fe 
a 


1010010011 oO 









ae ee 


a 
a 
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5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


RR 








g 


25008 


Sa aa 


Buesitspenauos 


LINING 
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5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





! Supervisor-level instruction 

* Supervisor- and user-level instruction 

3 Load and store string or multiple instruction 

4 64-bit instruction 

° Optional in the PowerPC architecture 

6 Floating-point instructions are not supported by the MPC850. 
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D.3 Instructions Grouped by Functional Categories 


Table D-3 through Table D-30 list the PowerPC instructions defined by the MPC850 
grouped by function. 


mullwx 
negx 
subfx 
subfcx 
subficx 


subfex 


subfmex 


subfzex 


MOTOROLA 





Table D-3. Integer Arithmetic Instructions 


5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 
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Instruction not implemented in the MPC850 


25 26 27 28 29 30 31 








Table D-4. Integer Compare Instructions 


9 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





ions 


Table D-5. integer Logical Instruct 


5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 








-6. Integer Rotate Instructions 


Table D 


59 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


0 


Name 
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Table D-6. Integer Rotate Instructions (Continued) 





Table D-7. Integer Shift Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-8. Floating-Point Arithmetic Instructions® 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


eens 
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ions® 


Add Instructi 


t Multiply- 


in 


Floating-Poi 
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Table D-13. Integer Load Instructions 
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Table D-14. Integer Store Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





>i Pm! Se) P| Yr] S| Yl} 


Table D-15. Integer Load and Store with Byte-Reverse Instructions 
Name 0 5 6 7 8 9 10 11 12 13 1415 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
lhbrx 
lwbrx 
sthbrx 


stwbrx 





Table D-16. Integer Load and Store Multiple Instructions 


Name _ 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Table D-17. Integer Load and Store String Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-18. Memory Synchronization Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-19. Floating-Point Load Instructions® 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Table D-21. Floating-Point Move Instructions® 
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Table D-24. System Linkage Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-25. Trap Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-26. Processor Control Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Table D-27. Cache Management Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


dcbf 
debi ' 
dcbst 
dcbt 
dcbtst 
dcbz 
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—a 


Table D-28. Segment Register Manipulation Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


mfsr | 
mfsrin 
1 

mtsr 


mtsrin | 





Table D-29. Lookaside Buffer Management Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-30. External Control Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





1 Supervisor-level instruction 

2 Supervisor- and user-level instruction 

3 Load and store string or multiple instruction 

4 64-bit instruction 

5 Optional in the PowerPC architecture 

6 Floating-point instructions are not supported by the MPC850. 
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D.4 Instructions Sorted by Form 


Table D-31 through Table D-45 list the PowerPC instructions defined by the MPC850 
grouped by form. 


Key: 


[| Reserved bits 


Instruction not implemented in the MPC850 
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Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Table D-32. B-Form 
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Specific Instruction 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Specific Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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sthx 31 
stswi ° 34 
stswx ° 31 


stwbrx 31 
stwcex. 31 


stwux 31 


stwx 31 








Specific Instructions 

Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
bectrx 
beirx 
crand 
crandc 
creqv 
crnand 
crnor 
cror 
crorc 


crxor 
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Name 0 5 6 7 8 9 10 11 12 13 14-15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Specific Instructions 


Name 0 5 6 7 8 9 10 11.12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Table D-40. XS-Form 


Specific Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Specific Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Specific Instructions 


Name 0 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Table D-45. MDS-Form 





Specific Instructions 
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





' Supervisor-level instruction 

 Supervisor- and user-level instruction 

> Load and store string or multiple instruction 

4 64-bit instruction 

° Optional in the PowerPC architecture 

6 Floating-point instructions are not supported by the MPC850. 
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D.5 Instruction Set Legend 


Table D-46 provides general information on the PowerPC instruction set defined by the 
MPC850 (such as the architectural level, privilege level, and form). 


___| Instruction not implemented in the MPC850 


Key: 
[| Reserved bits 
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UISA VEA OEA Supervisor Level 64-Bit Optional Form 
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' Supervisor-level instruction 

2 Supervisor- and user-level instruction 

3 Load and store string or multiple instruction 

4 64-bit instruction 

> Optional in the PowerPC architecture 

6 Floating-point instructions are not supported by the MPC850. 
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Glossary of Terms and Abbreviations 


The glossary contains an alphabetical list of terms, phrases, and abbreviations used in this 
book. Some of the terms and definitions included in the glossary are reprinted from JEEE 
Std. 754-1985, IEEE Standard for Binary Floating-Point Arithmetic, copyright ©1985 by 
the Institute of Electrical and Electronics Engineers, Inc. with the permission of the IEEE. 


Note that some terms are defined in the context of how they are used in this book. 


A Architecture. A detailed specification of requirements for a processor or 
computer system. It does not specify details of how the processor or 
computer system must be implemented; instead it provides a 
template for a family of compatible implementations. 


Asynchronous exception. Exceptions that are caused by events external to 
the processor’s execution. In this document, the term ‘asynchronous 
exception’ is used interchangeably with the word interrupt. 


Atomic access. A bus access that attempts to be part of a read-write operation 
to the same address uninterrupted by any other access to that address 
(the term refers to the fact that the transactions are indivisible). The 
PowerPC architecture implements atomic accesses through the 
Iwarx/stwex. instruction pair. 


Autobaud. The process of determining a serial data rate by timing the width 
of a single bit. 


B Big-endian. A byte-ordering method in memory where the address n of a 
word corresponds to the most-significant byte. In an addressed 
memory word, the bytes are ordered (left to right) 0, 1, 2, 3, with O 
being the most-significant byte. See Little-endian. 


Blockage. A pipeline stall that occurs when an instruction occupies an 
execution unit and prevents a subsequent instruction from being 
dispatched. 
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Boundedly undefined. A characteristic of results of certain operations that 
are not rigidly prescribed by the PowerPC architecture. Boundedly- 
undefined results for a given operation may vary among 
implementations, and between execution attempts in the same 
implementation. 


Although the architecture does not prescribe the exact behavior for 
when results are allowed to be boundedly undefined, the results of 
executing instructions in contexts where results are allowed to be 

- boundedly undefined are constrained to ones that could have been 
achieved by executing an arbitrary sequence of defined instructions, 
in valid form, starting in the state the machine was in before 
attempting to execute the given instruction. _ 


Breakpoint. A programmable event that forces the core to take a breakpoint 
exception. 


Burst. A bus transfer whose data phase consists of a sequence of transfers. 
For example, on a 64-bit bus, a four-beat burst can transfer four, 
64-bit double words. 


Bus parking. A feature that optimizes the use of the bus by allowing a device 
to retain bus mastership without having to rearbitrate. 


Cache. High-speed memory component containing recently-accessed data 
and/or instructions (subset of main memory). 


Cache coherency. An attribute in which an accurate and common view of 
memory is provided to all devices that share the a memory system. 
Caches are coherent if a processor performing a read from its cache 
is supplied with data corresponding to the most recent value written 
to memory or to another processor’s cache. 


Cache flush. An operation that removes from a cache any data from a 
specified address range. This operation ensures that any modified 
data within the specified address range is written back to main 
memory. This operation is generated typically by a Data Cache 
Block Flush (debf) instruction. 


Caching-inhibited. A memory update policy in which the cache is bypassed 
and the load or store is performed to or from main memory. 


Cast-outs. Cache blocks that must be written to memory when a cache miss 
causes a cache block to be replaced. 
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Changed bit. One of two page history bits found in each page table entry 
(PTE). The processor sets the changed bit if any store is performed 
into the page. See also Page access history bits and Referenced bit. 


Clear. To cause a bit or bit field to register a value of zero. The opposite of set. 


Context synchronization. An operation that ensures that all instructions in 
execution complete past the point where they can produce an 
exception, that all instructions in execution complete in the context 
in which they began execution, and that all subsequent instructions 
are fetched and executed in the new context. Context synchronization 
may result from executing specific instructions (such as isync or rfi) 
or when certain events occur (such as an exception). 


Copy-back. An operation in which modified data in a cache block is copied 
back to memory. 


Critical-data first. An aspect of burst accesses that allow the requested data 
(typically a word or double word) in a cache block to be transferred 
first. 


Denormalized number. A nonzero floating-point number whose exponent 
has a reserved value, usually the format's minimum, and whose 
explicit or implicit leading significand bit is zero. 


Direct-mapped cache. A cache in which each main memory address can 
appear in only one location within the cache, operates more quickly 
when the memory request is a cache hit. 


Direct-store. Interface available on PowerPC processors only to support 
direct-store devices from the POWER architecture. When the T bit 
of a segment descriptor is set, the descriptor defines the region of 
memory that is to be used as a direct-store segment. Note that this 
facility is being phased out of the architecture and will not likely be 
supported in future devices. Therefore, software should not depend 
on it and new software should not use it. 


Effective address (EA). The 32- or 64-bit address specified for a load, store, 
or an instruction fetch. This address is then submitted to the MMU 
for translation to either a physical memory address or an I/O address. 


Exception. A condition encountered by the processor that requires special, 
supervisor-level processing. 
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Exception handler. A software routine that executes when an exception is 
taken. Normally, the exception handler corrects the condition that 
caused the exception, or performs some other meaningful task (that 

may include aborting the program that caused the exception). The 
address for each exception handler is identified by an exception 

_ vector offset defined by the architecture and a prefix selected via the 
MSR. 


Extended opcode. A secondary opcode field generally located in instruction 
bits 21-30, that further defines the instruction type. All PowerPC 
instructions are one word in length. The most significant 6 bits of the 
instruction are the primary opcode, identifying the type of 
instruction. See also Primary opcode. 


Execution synchronization. A mechanism by which all instructions in 
execution are architecturally complete before beginning execution 
(appearing to begin execution) of the next instruction. Similar to 
context synchronization but doesn't force the contents of the 
instruction buffers to be deleted and refetched. 


Exponent. In the binary representation of a floating-point number, the 
exponent is the component that normally signifies the integer power 
to which the value two is raised in determining the value of the 
represented number. See also Biased exponent. 


Fetch. Retrieving instructions from either the cache or main memory and 
placing them into the instruction queue. 


Fully-associative. Addressing scheme where every cache location (every 
byte) can have any possible address. 


General-purpose register (GPR). Any of the 32 registers in the 
general-purpose register file. These registers provide the source 
operands and destination results for all integer data manipulation 
instructions. Integer load instructions move data from memory to 
GPRs and store instructions move data from GPRs to memory. 


Harvard architecture. An architectural model featuring separate caches for 
instruction and data. 


IEEE 754. A standard written by the Institute of Electrical and Electronics 
Engineers that defines operations and representations of binary 
floating-point arithmetic. 
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Illegal instructions. A class of instructions that are not implemented for a 
particular PowerPC processor. These include instructions not defined 
by the PowerPC architecture. In addition, for 32-bit 
implementations, instructions that are defined only for 64-bit 
implementations are considered to be illegal instructions. For 64-bit 
implementations instructions that are defined only for 32-bit 
implementations are considered to be illegal instructions. 


Implementation. A particular processor that conforms to the PowerPC 
architecture, but may differ from other architecture-compliant 
implementations for example in design, feature set, and 
implementation of optional features. The PowerPC architecture has 
many different implementations. 


Implementation-dependent. An aspect of a feature in a processor’s design 
that is defined by a processor’s design specifications rather than by 
the PowerPC architecture. 


Implementation-specific. An aspect of a feature in a processor’s design that 
is not required by the PowerPC architecture, but for which the 
PowerPC architecture may provide concessions to ensure that 
processors that implement the feature do so consistently. 


Imprecise exception. A type of synchronous exception that is allowed not to 
adhere to the precise exception model (See Precise exception). The 
PowerPC architecture allows only floating-point exceptions to be 
handled imprecisely. 


Internal bus. The bus connecting the core and system interface unit (SIU). 


Instruction latency. The total number of clock cycles necessary to execute 
an instruction and make ready the results of that instruction. 


Interrupt. An asynchronous exception. On PowerPC processors, interrupts 


are a special case of exceptions. See alSo asynchronous exception. 


Latency. The time an operation requires. For example, execution latency is 
the number of processor clocks an instruction takes to execute. 
Memory latency is the number of bus clocks needed to perform a 
memory operation. 


Least-significant bit (Isb). The bit of least value in an address, register, data 
element, or instruction encoding. 


Least-significant byte (LSB). The byte of least value in an address, register, 
data element, or instruction encoding. 
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Little-endian. A byte-ordering method in memory where the address n of a 


word corresponds to the least-significant byte. In an addressed 
memory word, the bytes are ordered (left to right) 3, 2, 1,0, with 3 
being the most-significant byte. See Big-endian. 


Master, The name given to a bus device that has been granted control, or 
mastership, of the bus. 


Memory access ordering. The specific order in which the processor 
performs load and store memory accesses and the order in which 
those accesses complete. 


Memory controller. A unit whose primary function is to control the external 
bus memories and I/O devices. 


Memory coherency. An aspect of caching in which it is ensured that an 


accurate view of memory is provided to all devices that share system 
memory. 


Memory consistency. Refers to agreement of levels of memory with respect 
to a single processor and system memory (for example, on-chip 
cache, secondary cache, and system memory). 


Memory management unit (MMU). The functional unit that is capable of 
translating an effective (logical) address to a physical address, 
providing protection mechanisms, and defining caching methods. 


Microarchitecture. The hardware details of a microprocessor’s design. Such 
details are not defined by the PowerPC architecture. 


Mnemonic. The abbreviated name of an instruction used for coding. 


Modified state. When a cache block is in the modified state, it has been 
modified by the processor since it was copied from memory. See 
MESI. | 


Munging. A modification performed on an effective address that allows it to 
appear to the processor that individual aligned scalars are stored as 
little-endian values, when in fact it is stored in big-endian order, but 
at different byte addresses within double words. Note that munging 
affects only the effective address and not the byte order. Note also 
that this term is not used by the PowerPC architecture. 


Most-significant bit (msb). The highest-order bit in an address, registers, 
data element, or instruction encoding. 
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Most-significant byte (MSB). The highest-order byte in an address, 
registers, data element, or instruction encoding. 


No-op. No-operation. A single-cycle operation that does not affect registers 
or generate bus activity. 


OEA (operating environment architecture). The level of the architecture 
that describes PowerPC memory management model, 
supervisor-level registers, synchronization requirements, and the 
exception model. It also defines the time-base feature from a 
supervisor-level perspective. Implementations that conform to the 
PowerPC OEA also conform to the PowerPC UISA and VEA. 


Optional. A feature, such as an instruction, a register, or an exception, that is 
defined by the PowerPC architecture but not required to be 
implemented. 


Out-of-order. An aspect of an operation that allows it to be performed ahead 
of one that may have preceded it in the sequential model, for 
example, speculative operations. An operation is said to be 
performed out-of-order if, at the time that it is performed, it is not 
known to be required by the sequential execution model. See 
In-order. 


Out-of-order execution. A technique that allows instructions to be issued 
and completed in an order that differs from their sequence in the 
instruction stream. 


Overflow. An error condition that occurs during arithmetic operations when 
the result cannot be stored accurately in the destination register(s). 
For example, if two 32-bit numbers are multiplied, the result may not 
be representable in 32 bits. 


Pace control. Controls the rate of the data flow between a master and slave. 


Page. A region in memory. The OEA defines a page as a 4-Kbyte area of 
memory, aligned on a 4-Kbyte boundary. 


Page fault. A page fault is a condition that occurs when the processor 
attempts to access a memory location that does not reside within a 
page not currently resident in physical memory. On PowerPC 
processors, a page fault exception condition occurs when a 
matching, valid page table entry (PTE[V] = 1) cannot be located. 


ocaoapesncaness crests spesermoaes rosea 
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Physical memory. The actual memory that can be accessed through the 
system’s memory bus. 


Pipelining. A technique that breaks operations, such as_ instruction 
processing or bus transactions, into smaller distinct stages or tenures 
(respectively) so that a subsequent operation can begin before the 
previous one has completed. 


Precise exceptions. A category of exception for which the pipeline can be 
stopped so instructions that preceded the faulting instruction can 
complete, and subsequent instructions can be flushed and 
redispatched after exception handling has completed. See Imprecise 
exceptions. 


Primary opcode. The most-significant 6 bits (bits O—5) of the instruction 
encoding that identifies the type of instruction. See Secondary 
opcode. 


Protection boundary. A boundary between protection domains. 


Protection domain. A protection domain is a segment, a virtual page, a BAT 
area, or a range of unmapped effective addresses. It is defined only 
when the appropriate relocate bit in the MSR (IR or DR) is 1. 


Quad word. A group of 16 contiguous locations starting at an address 
divisible by 16. 


rA. The rA instruction field is used to specify a GPR to be used as a source 
or destination. 7 


rB. The rB instruction field is used to specify a GPR to be used as a source. 


rD. The rD instruction field is used to specify a GPR to be used as a 
destination. 


rS. The rS instruction field is used to specify a GPR to be used as a source. 


Real address mode. An MMU mode when no address translation is 
performed and the effective address specified is the same as the 
physical address. The processor’s MMU is operating in real address 
mode if its ability to perform address translation has been disabled 
through the MSR registers IR and/or DR bits. 


Record bit. Bit 31 (or the Rc bit) in the instruction encoding. When it is set, 
updates the condition register (CR) to reflect the result of the 
operation. 
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Register indirect addressing. A form of addressing that specifies one GPR 
that contains the address for the load or store. 


Register indirect with immediate index addressing. A form of addressing 
that specifies an immediate value to be added to the contents of a 
specified GPR to form the target address for the load or store. 


Register indirect with index addressing. A form of addressing that specifies 
that the contents of two GPRs be added together to yield the target 
address for the load or store. 


Reservation. The processor establishes a reservation on a cache block of 
memory space when it executes an lwarx instruction to read a 
memory semaphore into a GPR. 


Reserved field. In a register, a reserved field is one that is not assigned a 
function. A reserved field may be a single bit. The handling of 
reserved bits is implementation-dependent. Software is permitted to 
write any value to such a bit. A subsequent reading of the bit returns 
O if the value last written to the bit was O and returns an undefined 
value (0 or 1) otherwise. 


RISC (reduced instruction set computing). An architecture characterized 
by fixed-length instructions with nonoverlapping functionality and 
by a separate set of load and store instructions that perform memory 
accesses. 


Scalability. The capability of an architecture to generate implementations 
specific for a wide range of purposes, and in _ particular 
implementations of significantly greater performance and/or 
functionality than at present, while maintaining compatibility with 
current implementations. 


Scan chain. The peripheral buffers of a device, linked in JTAG test mode, that 
are addressed in a shift-register fashion. 


Set (v). To write a nonzero value to a bit or bit field; the opposite of clear. The 
term ‘set’ may also be used to generally describe the updating of a 
bit or bit field. 


Set (n). A subdivision of a cache. Cacheable data can be stored in a given 
location in any one of the sets, typically corresponding to its 
lower-order address bits. Because several memory locations can map 
to the same location, cached data is typically placed in the set whose 
cache block corresponding to that address was used least recently. 
See Set-associative. 
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Set-associative. Aspect of cache organization in which the cache space is 
divided into sections, called sets. The cache controller associates a 
particular main memory address with the contents of a particular set, 
or region, within the cache. 


Significand. The component of a binary floating-point number that consists 
of an explicit or implicit leading bit to the left of its implied binary 
point and a fraction field to the right. | 


Slave. A device that responds to the master’s address. A slave receives data 
on a write cycle and gives data to the master on a read cycle. © 


Static branch prediction. Mechanism by which software (for example, 
compilers) can give a hint to the machine hardware about the 
direction a branch is likely to take. 


Sticky bit. A bit that when set must be cleared explicitly. 


Superscalar machine. A machine that can issue multiple instructions 
concurrently from a conventional linear instruction stream. 


Supervisor mode. The privileged operation state of a processor. In 
supervisor mode, software, typically the operating system, can 
access all control registers and can access the supervisor memory 
space, among other privileged operations. 


Synchronization. A process to ensure that operations occur strictly in order. 
See Context synchronization and Execution synchronization. 


Synchronous exception. An exception that is generated by the execution of 
a particular instruction or instruction sequence. There are two types 
of synchronous exceptions, precise and imprecise. 


System memory. The physical memory available to a processor. 


Time-division multiplex (TDM). A single serial channel used by several 
channels taking turns. 


TLB (translation lookaside buffer) A cache that holds recently-used page 
table entries. 


Throughput. The measure of the number of instructions that are processed 
per clock cycle. 


UISA (user instruction set architecture). The level of the architecture to 
which user-level software should conform. The UISA defines the 
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base user-level instruction set, user-level registers, data types, 
floating-point memory conventions and exception model as seen by 
user programs, and the memory and programming models. 


User mode. The unprivileged operating state of a processor used typically by 
application software. In user mode, software can only access certain 
control registers and can access only user memory space. No 
privileged operations can be performed. Also referred to as problem 
state. 


VEA (virtual environment architecture). The level of the architecture that 
describes the memory model for an environment in which multiple 
devices can access memory, defines aspects of the cache model, 
defines cache control instructions, and defines the time-base facility 
from a user-level perspective. Implementations that conform to the 
PowerPC VEA also adhere to the UISA, but may not necessarily 
adhere to the OEA. 


Virtual address. An intermediate address used in the translation of an 
effective address to a physical address. 


Virtual memory. The address space created using the memory management 
facilities of the processor. Program access to virtual memory is 
possible only when it coincides with physical memory. 


Watchpoint. An event that is reported, but does not change the timing of the 
machine. 


Word. A 32-bit data element. Note that on other processors a word may be a 
different size. 


Write-back. A cache memory update policy in which processor write cycles 
are directly written only to the cache. External memory is updated 
only indirectly, for example, when a modified cache block 1s cast out 
to make room for newer data. 


Write-through. A cache memory update policy in which all processor write 
cycles are written to both the cache and memory. 
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Acronyms and abbreviated terms, 
list, Ixvi, I-ii, [I-i11, I-11, [V-i11, V-iv, VI-ii 
Address multiplexing, 15-44 
Alignment 
aligned accesses, 5-1 
alignment on transfers, 13-23 
An (address bus) signals, 12-5, 13-3, 13-30 
Asynchronous HDLC mode 
channel implementation, 25-5 
decoding the receiver transparency, 25-3 
DSR configuration, 25-6 
encoding the transmitter transparency, 25-3 
error handling, 25-8 
features, 25-1 
frame reception processing, 25-2 
frame transmission processing, 25-2 
GSMR configuration, 25-6 
HDLC mode, differences, 25-14 
overview, 25-1 
programming example, 25-15 
programming the controller, 25-7 
receive commands, 25-8 
RxBD, 25-11 
transmit commands, 25-7 
TxBD, 25-13 
ATn (address type) signals, 13-4, 13-30 


BAR (breakpoint address register), 36-38 
Baud rate generator clock (BRGCLK), 14-14 
Baud rate generator configuration (BRGC) 
register, 20-36 
Baud rate generators 
autobaud operation on a UART, 20-38 
block diagram, 20-36 
overview, 20-35 
registers, 20-36 
UART baud rate examples, 20-39 
BB (bus busy) signal, 12-8, 13-6, 13-27 
BDIP (burst data in progress) signal, 12-5, 13-4, 
13-33 
BDLE (SCC BISYNC DLE) register, 26-8 
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BG (bus grant) signal, 12-8, 13-6, 13-27 
BI (burst inhibit) signal, 12-6, 13-5, 13-33 
Big-endian (BE) mode, A-2 
BISYNC mode 
commands, 26-5 
control character recognition, 26-6 
error handling, 26-9 
frame reception, 26-3 
frame transmission, 26-2 
frames, classes, 26-1 
memory map, 26-4 
overview, 26-1 
parameter RAM, 26-4 
programming example, 26-18 
programming the controller, 26-17 
receiving synchronization sequence, 26-9 
RxBD, 26-12 
sending synchronization sequence, 26-9 
TxBD, 26-13 
Block diagrams 
baud rate generators, 20-36 
CPM timer, 17-5 
Pc controller, 33-1 
MPC850, 3-4 
parallel I/O ports 
port A block diagrams, 34-6 
serial interface, 20-2 
serial peripheral interface, 31-1 
software watchdog timer, 10-21 
Boot chip-select operation, 15-27 
Boundedly undefined, definition, 5-4 
BR (bus request) signal, 12-7, 13-6, 13-26 
Branch folding timing, 9-4 
Branch instructions 
branch instructions, D-24 
condition register logical, D-24 
system linkage, D-25 
trap, D-25 
Branch prediction timing, 9-5 
Breakpoint 
counters, 36-14 
debug support, 36-8 
features list, 36-9 
load/store example, 36-18 
operation details, 36-15 
BRn (base registers), 15-8 
BSYNC (BISYNC SYNC) register, 26-7 
Buffer descriptors 
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BISYNC mode, 26-12 
communications processor, 18-12 
Ethernet mode, 27-17 
GCI mode, 30-34, 30-36 
HDLC mode, 23-8 
IC controller, 33-11 
IDMA channels, 19-9 
overview, 21-11 
serial management controllers (SMCs), 30-5 
serial peripheral interface (SPI), 31-13 
transparent mode 
serial communications controllers (SCCs), 28-9 
serial management controllers (SMCs), 30-27 
UART mode 
serial communications controllers (SCCs), 22-15 
serial management controllers (SMCs), 30-15 
USB controller, 32-14 
BURST (burst transfer) signal, 12-5, 13- nm 13-30 
Burst bus operations, 13-14 
Burst transfer bus operation, 13-13 
Bus arbitration, 13-25 
Bus exception control cycles, 13-36 
Bus interface 
address bus, 13-30 
address type, 13-30 
arbitration phase, 13-25 
burst data in progress, 13-33 
burst indicator, 13-30 
burst inhibit, 13-33 
bus busy, 13-27 
bus exception control cycles, 13-36 
bus grant, 13-27 
bus operations, 13-6 
bus request, 13-26 
bus utilization, B-2 
control signals, 13-2 
features summary, 1-10, 13-1 
hierarchical bus interface example, 15-52 
program trace, 13-30 
read/write, 13-30 
reservation transfer, 13-30 
retry, 13-36 
signal descriptions, 13-2 
storage reservation, 13-34 
system bus performance, B-2 
transfer acknowledge, 13-33 
transfer error acknowledge, 13-33 
transfer signals, 13-1 
transfer size, 13-30 
transfer start, 13-29 
Bus operations 
burst operations, 13-14 
burst transfer, 13-13 
single-beat read flow, 13-7 


single-beat transfer, 13-7 
single-beat write flow, 13-9 
transfer protocol, 13-6 
BYPASS instruction, 37-7 
Byte ordering 
BE (big-endian) mode, A-2 
mechanisms, A-1 
overview, A-1 
PPC-LE (PowerPC little-endian) mode, A-6 
TLE (true little-endian) mode, A-2 
Byte stuffing, 26-1 
Byte-reverse instructions, D-22 
Byte-select signals, 15-40 


C 


Cache 
cache block 
memory control instructions, 5-21 
cache block, definition, 7-1 
cache blocks, locked, 7-10 
cache control instructions, 7-18 
cache control registers, 7-6 
cache line, definition, 7-1 
data cache 
atomic memory references, 7-28 
caching-inhibited data accesses, 7-27 
copyback buffer, 7-14 
DC_CST commands, 7-15 
debug mode, 7-29 
debugger, software monitor, 7-30 
disable command, 7-16 
enable command, 7-16 
flush cache block command, 7-17 
invalidate all command, 7-17 
load & lock cache block command, 7-16 
load hit, 7-25 
memory coherency, 7-6 
operations, 7-24 
organization, 7-5 
read miss, 7-25 
reading tags, 7-14 
registers, 7-11 
snooping, 7-6 
store hit (write-back mode), 7-26 
store hit (write-through mode), 7-26 
store miss (write-back mode), 7-27 
store miss (write-through mode), 7-26 
unlock all commands, 7-17 
unlock cache block command, 7-17 
write-back mode, 7-26 
write-through mode, 7-26 
debug support, 7-29 
initialization after reset, 7-29 
instruction cache 
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block buffer, 7-21 
burst buffer, 7-21 
cache hit, 7-22 
cache miss, 7-22 
caching-inhibited instruction fetch, 7-23 
data path, 7-21 
debug mode, 7-29 
debugger, software monitor, 7-30 
disable commands, 7-9 
enable commands, 7-9 
IC_CST commands, 7-9 
instruction fetching, 7-23 
instruction sequencer, 7-2, 7-20 
invalidate all command, 7-11 
load & lock cache block commands, 7-10 
memory coherency, 7-4 
operations, 7-20 
organization, 7-2 
read command, 7-9 
reading data, 7-8 
reading tags, 7-9 
registers, 7-6 
snooping, 7-4, 7-24 
stream hits, 7-22 
unlock all command, 7-11 
unlock cache block command, 7-11 
updating code, 7-24 
instructions, D-26 
intruction cache 
hits under misses, 7-22 
locked cache blocks, 7-10 
memory/cache access attributes, 7-18 
write-back mode, 7-26 
write-through mode, 7-26 
Cache management instructions, D-26 
Cascaded mode, 17-7 
Checkstop reset, 11-3 
Chip-select machine, 15-18 
Chip-select signals, 15-40 
CICR (CPM interrupt configuration register), 35-7 
CIMR (CPM interrupt mask register), 35-9 
CIPR (CPM interrupt pending register), 35-8 
CISR (CPM interrupt in-service register), 35-9 
CIVR (CPM interrupt vector register), 35-10 
CLAMP instruction, 37-7 
Clock dividers, low-power, 14-10 
Clock glitch detection, 21-25 
Clocks, 14-9 
baud rate generator, 14-14 
development port serial communications clock 
mode, 36-28 
PC controller clocking, 33-2 
overview, 1-12, 14-1 
SCC clock glitch detection, 21-25 
serial clocking (peak rate limitation), B-1 
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serial peripheral interface 
SPI clocking functions, 31-2 
SPI transfers with different clocking modes, 31-8 
synchronization clocks, 14-14 
USB controller clocking functions, 32-3 
Communications processor (CP) 
commands, 18-7 
communicating with peripherals, 18-2 
communicating with the core, 18-2 
CP command execution latency, 18-9 
dual-port RAM, 18-9 
features list, 18-1 
host command opcodes, 18-7 
microcode revision number, 18-3 
overview, 18-1 
parameter RAM, 18-12 
PWM mode, 18-16 
registers, 18-4 
RISC timer initialization, 18-17 
RISC timer tables, 18-13 
SET TIMER command, 18-14 
tracking CP loading, 18-18 
Communications processor module (CPM) 
average rate limitation, B-2 
CPM bandwidth, B-2 
CPM interrupt controller 
calculating interrupt vectors, 35-5 
features, 35-1 
generating interrupt vectors, 35-5 
highest priority interrupt, 35-4 
interrupt handler examples, 35-10 
masking interrupt sources, 35-4 
nested interrupts, 35-4 
overview, 35-1 
registers, 35-6 
source priorities, 35-3 
features list, 17-1 
performance calculations, B-5 
timers 
block diagram, 17-5 
features list, 17-5 
general-purpose timers, 17-4 
initialization examples, 17-11 
operation, 17-5 
registers, 17-8 
Comparator value (CMPA—CMPH) registers, 36-37 
Compare instructions, D-18 
Completion queue timing, full, 9-4 
Context synchronization, 5-6 
Conventions 
notational conventions, Ixv, ITJ-i, [V-ii, V-iv, VI-ii 
terminology, 1xix, II-v 
copyback buffer, 7-15 
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COUNTA/COUNTB (breakpoint counter value and DPDR (development port data register), 36-47 
control) registers, 36-43 DPn (parity bus) signals, 12-7, 13-5 
CPCR (CP command register), 18-6 DSR (data synchronization register) 


CPCR (CPM command register), 32-19 
CPIC, see CPM interrupt controller 
CPM interrupt controller (CPIC) 
calculating interrupt vectors, 35-5 
features, 35-1 E 
generating interrupt vectors, 35-5 
highest priority interrupt, 35-4 
interrupt handler examples, 35-10 
masking interrupt sources, 35-4 
nested interrupts, 35-4 
overview, 35-1 
registers, 35-6 
source priorities, 35-3 
CPM see Communications processor module (CPM) 
CR (condition register), 4-2 
CSn (chip select) signals, 12-8 


D 


Data bus 
contents for write cycles, 13-25 
requirements for read cycles, 13-25 
Data cache miss timing, 9-3 
DC_ADR (data cache address) register, 7-13 
DC_CST (data cache control and status) register, 7-12 
DC_CST commands, 7-15 
DC_DAT (data cache data port) register, 7-14 
DCMR (DMA channel mode register), 19-7 
DCMR (IDMAI1 channel mode register), 19-19 
Debug mode 
development support, 36-32 


asynchronous HDLC mode, 25-7 
overview, 21-10 
UART mode, 22-11 


Effective address calculation, 5-6 
Endian modes 


BE mode, A-2 

PPC-LE mode, A-6 
setting endian modes, A-8 
TLE mode, A-2 


EPnPTR (endpoint pointer) registers, 32-7 
Ethernet mode 


address recognition, 27-12 
collision handling, 27-13 
commands, 27-10 

connecting to Ethernet, 27-5 
error handling, 27-14 
external loopback, 27-14 
frame reception, 27-7 

frame structure, 27-1 

frame transmission, 27-6 
full-duplex support, 27-14 
hash table algorithm, 27-13 
internal loopback, 27-14 
interpacket gap time, 27-13 
learning Ethernet, 27-4 
overview, 27-1 

programming example, 27-23 
programming the controller, 27-10 


operation, 36-21 RxBD, 27-17 © 
Debug port hard/soft reset, 11-3 TxBD, 27-19 
Debug support, 7-29 Exceptions 


DEC (decrementer) register, 10-23 
Decrementer, 10-22 
DER (debug enable register), 36-46 
Development port shift register, 36-27 
Development system interface 

checkstop state and debug mode, 36-24 

debug mode operation, 36-21 

development port communication, 36-25 

fast download procedure, 36-34 

freeze indication, 36-26 

overview, 36-19 

programming model, 36-36 

registers, 36-27 

signals, 36-26 
DFCR (destination function code registers), 19-11 
Digital phase-locked loop (DPLL) operation, 21-22 
DMA module, 16-7 
Dn (data bus) signals, 12-6, 13-5 
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alignment exception, 6-7 
asynchronous exceptions, 6-3 
breakpoint detection, 36-8 

bus exception control cycles, 13-36 
debug exceptions, 6-15 
decrementer exception, 6-10 

DSI exception, 6-6 

DTLB error, 6-14, 8-32 

DTLB miss, 6-13, 8-32 

exception handling, 6-1, 15-44 
exception latency, 6-18 

exception priority, 6-4 

external interrupt, 6-6 

external reset exception, 19-22 
floating-point assist, 6-12 
instruction offset, 6-2 
instruction-related exceptions, 5-7 
integer alignment, 6-8 
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IST exception, 6-6 
ITLB error, 6-13, 8-32 
ITLB miss, 6-12, 8-32 
list of exceptions, 6-2 
machine check interrupt, 6-5 
MMU exceptions, 8-32 
ordering, 6-3 
partially completed instructions, 6-19 
PCMCIA interrupts, 16-6 
PowerPC defined, 6-4 
precise exception model, implementing, 6-16 
program exception, 6-9 
recoverability after an exception, 6-17 
RISC timer interrupt handling, 18-18 
SCC interrupt handling, 21-16 
software emulation, 6-12 
synchronous exceptions, 6-3 
system call, 6-10 
system reset interrupt, 6-5 
trace exception, 6-11 
Execution synchronization, 5-7 
External bus interface, see Bus interface 
External control instructions, D-26 
External load timing, 9-3 
External test (EXTEST) instruction, 37-6 


FE 


Features lists 
breakpoint debug support, 36-9 
clocks and power control, 1-12, 14-1 
communications processor (CP), 18-1 
communications processor module (CPM), 17-1 
CPM interrupt controller, 35-1 
CPM timers, 17-5 
data cache operation, 7-25 
external bus interface, 1-10, 13-1 
HDLC bus controller, 23-19 
LC controller, 33-2 
IDMA channels, 19-6 
instruction cache operation, 7-22 
memory controller, 1-13, 15-1 
MMU, 8-1 
MPC850-specific features, 3-4 
non-multiplexed serial interface (NMSI), 20-3 
parallel I/O ports, 34-2 
PowerPC architecture-defined, 3-2 
serial communications controllers (SCCs) 
AppleTalk mode, 24-2 
asynchronous HDLC mode, 25-1 
BISYNC mode, 26-2 
Ethernet mode, 27-3 
general list, 21-3 
HDLC mode, 23-2 
transparent mode, 28-1 
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UART mode, 22-2 
serial interface (SI), 20-3 
serial management controllers (SMCs) 
general list, 30-2 
transparent mode, 30-22 
UART mode, 30-11 
UART mode, features not supported, 30-10 
serial peripheral interface (SPI), 31-2 
system interface unit, 10-2 
USB controller, 32-2 
watchpoint debug support, 36-9 
Freeze operation, 10-33 
FRZ (freeze) signal, 12-8 
Full completion queue timing, 9-4 


G 


General-purpose chip-select machine (GPCM), 15-18 
General-purpose signals, 15-41 
GPL_Xn (general-purpose line) signal, 12-9 
GSMR (general SCC mode register) 
AppleTalk mode, 24-3 
asynchronous HDLC mode, 25-6 
HDLC bus protocol, programming, 23-22 
overview, 21-4 
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Hard reset configuration word, 11-9 
HDLC mode 
accessing the bus, 23-19 
bus controller, 23-16 
collision detection, 23-16, 23-20 
commands, 23-5 
delayed RTS mode, 23-21 
error handling, 23-6 
features, 23-2 
GSMR, HDLC bus protocol programming, 23-22 
ISDN terminal adaptor, 20-25 
multi-master bus configuration, 23-18 
overview, 23-1 
parameter RAM, 23-3 
performance, increasing, 23-20 
programming example, 23-15, 23-23 
programming the controller, 23-5 
PSMR, 23-7 
RxBD, 23-8 
single-master bus configuration, 23-19 
TxBD, 23-11 
using the TSA, 23-22 
HI-Z instruction, 37-7 
HRESET 
external, 11-2 
hard reset configuration word, 11-9 
internal, 11-2 
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reset configuration, 11-6, 11-7 
reset sequence, 11-3 

HRESET (hard reset) 
settings at power-on, 14-6 
signal description, 12-10 


I2ADD (°C address) register, 33-7 
I2BRG (IC baud rate generator) register, 33-7 
PC controller 

buffer descriptors, 33-11 

clocking, 33-2 

commands, 33-11 

loopback testing, 33-4 

master read (slave write), 33-4 

master write (slave read), 33-3 

multi-master considerations, 33-5 

overview, V-ii 

parameter RAM, 33-9 

registers, 33-6 

RxBD, 33-13 

signal functions, 33-2 

slave read (master write), 33-3 

slave write (master read), 33-4 

transfers, 33-3 

TxBD, 33-13 
I2CER (IC event register), 33-8 
I2CMR (°C mask register), 33-8 
I2COM (IC command) register, 33-8 
I2MOD (PC mode) register, 33-6 
IC_ADR (instruction cache address) register, 7-8, 7-8 
IC_CST (instruction cache control and status) 

register, 7-6 

IC_CST commands, 7-9 
IC_DAT (instruction cache data port) register, 7-8 
ICTRL (instruction support control) register, 36-39 
IDMA 

serial performance considerations, B-4 
IDMA channels 

activating a channel, 19-13 

auto-buffering, 19-12 

buffer-chaining, 19-12 

channel operation, 19-13 

emulation, 19-5 

features list, 19-6 

host commands, 19-13 

IDMA1 burst timing, single-buffer mode, 19-20 

memory map, 19-6 

parameter RAM, 19-6 

registers, 19-7 

single-buffer mode, 19-18 

suspending a channel, 19-13 





TEA signal, 19-22 
transfers 


dual address, 19-15 
external recognition, 19-21 
IDMA request for peripheral to memory 
transfers, 19-14 
IDMA requests for memory to memory 
transfers, 19-14 
interrupts during a bus transfer, 19-22 
single address, 19-15 
IDMR1 (IDMA1 mask register), 19-9, 19-20 
IDMR2 (IDMA2 mask register), 19-9 
IDSR1 (IDMAI status register), 19-8, 19-20 
IDSR2 (DMA2 status register), 19-8 
IEEE 1149.1 test access port 
boundary scan register, 37-3 
BSDL description, 37-8 
overview, 37-1 
recommended configuration, 37-8 
TAP controller, 37-2 
usage considerations, 37-7 
IMMR (internal memory map register), 10-5 
Instruction fetch show cycle, 36-3 
Instructions 
branch and flow control 
branch instruction address calculation, 5-15 
branch instructions, 5-16 
condition register logical instructions, 5-16 
branch instructions, D-24 
BYPASS, 37-7 
cache management, 5-23 
cache management instructions, D-26 
CLAMP, 37-7 | 
classes of instructions, 5-3 
condition register logical, D-24 
dcbf, 7-20 
dcbi, 7-20 
dcbst, 7-19 
dcbt, 7-18 
dcbtst, 7-18 
dcbz, 7-19 
external control, D-26 
EXTEST, 37-6 
floating-point 
arithmetic, D-19 
compare, D-20 
FP load instructions, D-23 
FP move instructions, D-24 
FP store instructions, D-24 
FPSCR isntructions, D-20 
multiply-add, D-20 
rounding and conversion, D-20 
functional categories, D-17 
HI-Z, 37-7 
icbi, 7-18 
illegal instructions, 5-4 
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instruction field conventions, Ixx, I-vi 
instruction timing, 9-1 
integer 
arithmetic, 5-8, D-17 
byte-reverse instructions, 5-13 
compare, 5-9, D-18 
load, D-21 
load instructions, 5-12 
load/store address generation, 5-11 
load/store multiple instructions, 5-14 
load/store string instructions, 5-14 
logical, 5-10, D-18 
multiple, D-22 
rotate and shift, 5-10, D-18—D-19 
store, D-22 
store instructions, 5-13 
isync, 7-9 
load and store 
byte-reverse instructions, D-22 
integer multiple instructions, D-22 
string instructions, D-23 
load/store 
byte- reverse instructions, 5-13 
integer load/store address generation, 5-11 
load instructions, 5-12 
multiple instructions, 5-14 
store instructions, 5-13 
string instructions, 5-14 
lwarx, 7-28 
memory control, D-26 
OEA, 5-23 
VEA, 5-21 
memory synchronization, D-23 
UISA, 5-17 
VEA, 5-20 
mfspr, 7-6, 7-11 
mtspr, 7-6, 7-11 
optional instructions, D-39 
processor control, D-25 
OEA, 5-22 
UISA, 5-17 
VEA, 5-20 
quick reference list 
general information legend, D-39 
sorted by form (format), D-27 
sorted by function, D-17 
sorted by mnemonic, D-1 
reserved instructions, 5-5 
SAMPLE/PRELOAD, 37-6 
segment register manipulation, D-26 
simplified mnemonics, 5-24 
stwcx., 7-28 
summary of instructions, 5-2 
system linkage, 5-22, D-25 
TAP instructions, 37-6 
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TLB management instructions, D-26 
trap instructions, 5-17, D-25 
UISA instructions, 5-8 
Integer arithmetic instructions, D-17 
Integer compare instructions, D-18 
Integer load instructions, D-21 
Integer logical instructions, D-18 
Integer multiple instructions, D-22 
Integer rotate and shift instructions, D-18—D-19 
Integer store instructions, D-22 
Integer unit 
overview, 3-10 
Interrupt cause (ICR) register, 36-44 
Interrupt controller, SIU, 10-15 
Interrupts 
programming the SIU interrupt controller, 10-15 
SIU interrupt priority, 10-13 
SIU interrupt processing, 10-14 
SIU interrupt structure, 10-11, 10-12 
IrDA mode 
high-speed IrDA protocol, 29-1, 29-3 
low-speed IrDA protocol, 29-1, 29-2 
middle-speed IrDA protocol, 29-1, 29-2 
programming examples 
high-speed, 29-10 
low-speed, 29-8 
middle-speed, 29-9 
registers, 29-6 
serial infrared (SIR) link, implementation, 29-1 
serial infrared interaction pulses, 29-5 
IRMODE (infrared mode) register, 29-6 
IRQO operation, 10-14 
IRQn (interrupt request) signals, 12-8 
IRSIP (infrared serial interaction control) 
register, 29-7 


J 


JTAG reset, 11-3 
JTAG signals, 12-17 


K 
KR/RETRY (kill reservation/retry) signal, 12-6, 13-4 


L 


LCTRL1 (load/store support comparators control) 
register, 36-40 

LCTRL2 (load/store support AND-OR control) 
register, 36-41 
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Load/store 
byte-reverse instructions, D-22 | 
floating-point load instructions, D-23 
floating-point move instructions, D-24 
floating-point store instructions, D-24 
integer load instructions, D-21 
integer store instructions, D-22 
load/store multiple instructions, D-22 
memory synchronization instructions, D-23 
string instructions, D-23 | 

Load/store unit 
BAR updates, 4-6 
DAR updates, 4-5 
DSISR updates, 4-5 
load/store instruction timing, 9-7 
overview, 3-10 

Lock/key registers, 10-10 

Loop control, 15-43 

Low-power stop operation, 10-33 


M_CASID (MMU current address space ID) 
register, 8-23 : 
M_TW (MMU tablewalk special) register, 8-24 
M_TWB (MMU tablewalk base) register, 8-23 
MAR (memory address register), 15-17 
MCR (memory command) register, 15-15 
MD_CAM (DMMU CAM entry read) register, 8-28 
MD_CTR (DMMU control) register, 8-17 © 
MD_RAM (DMMU RAM entry read 0) register, 8-29 
MD_RAM (DMMU RAM entry read 1) register, 8-30 
MD_RPN (DMMU real page number) register, 8-22 
MD_TWC (DMMU tablewalk control) register, 8-19 
- MDR (memory data register), 15-16 
Memory controller 
basic architecture, 15-4 
block diagram (single UPM), 15-3 
external master support, 15-52 
features summary, 1-13, 15-1 
memory system interface, 15-60 
overview, 1-13, 15-1 
page mode extended data-out interface, 15-71 
registers, 15-8 
Memory map reference, 2-1 
Memory maps 
CP dual-port RAM, 18-11 
IDMA channel, 19-6 
RISC timer table, 18-14 
serial communications controllers (SCCs) 
BISYNC mode, 26-4 
Ethernet mode, 27-8 
HDLC mode, 23-4 
UART mode, 22-4 
serial management controllers (SMCs) 


GCI mode, 30-33 
transparent mode, 30-7 
UART mode, 30-7 
Memory synchronization 
instructions, D-23 
Memory system interface, 15-60 
MI_CAM (IMMU CAM entry read) register, 8-25 
MI_CTR (IMMU control) register, 8-16. 
MI_RAM (IMMU RAM entry read 1) register, 8-27 
MI_RAMO (IMMU RAM entry read 0) register, 8-26 
MI_RPN (IMMU real page number) register, 8-20 
MI_TWC (IMMU tablewalk control) register, 8-18 
Misalignment 
misaligned accesses, 5-1 
MMU (memory management unit) 
access protection groups, 8-6 
address translation, 8-3 
debug registers, 8-25 
exceptions, 8-32 
features, 8-1 
memory attributes, 8-8 
overview, 8-1 
programming model, 8-14 
protection resolution modes, 8-7 
TLB invalidation, 8-34 
TLB operation, 8-5 
TLB reload, 8-32 
translation table structure, 8-9 
Modes 
asynchronous HDLC mode, 25-1 
BE (big-endian) mode byte ordering, A-2 
BISYNC mode, 26-1 
cascaded mode, 17-7 
clock mode, development port, 36-28 
debug mode 
development support, 36-32 
operation, 36-21 
echo mode, 30-1 
Ethernet mode, 27-1 
HDLC mode, 23-1 
hunt mode, 22-9 
IDMA single-buffer mode, 19-18 
IrDA mode, 29-1 
loopback mode, 30-1 
munged little-endian byte ordering, A-1 
PPC-LE (PowerPC little-endian) mode byte 
ordering, A-6 
PWM mode, 18-16 
restart gate mode, 17-7 
SCC AppleTalk mode, 24-1 
SCIT mode, 20-31 
setting the endian operation mode, A-8 
slow go mode, 17-6 
TLE (true little-endian) mode byte ordering, A-2 
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transparent mode 
serial communications controllers (SCCs), 28-1 
serial management controllers (SMCs), 30-21 
trap enable, development port, 36-30 
UART mode 
serial communications controllers (SCCs), 22-1 
serial management controllers (SMCs), 30-10 
MPC850 
basic core structure, 3-5 
block diagram, 3-4 
execution units, 3-9 
features summary, 3-4 
PowerPC architecture adherence, 3-1, 3-14 
MPTPR (memory periodic timer prescaler 
register), 15-17 
MSR (machine state register) 
additional SPRs, 6-17 
description, 4-6 
MSTAT (memory status) register, 15-13 
Munged little endian mode, see PowerPC 
little-endian (PPC-LE) mode 
Munging, definition, A-1 
Mx_AP (IMMU/DMMU access protection) 
register, 8-24 
Mx_EPN (IMMU/DMMU effective page number) 
register, 8-18 
MxMR (machine X mode registers), 15-13 


N 


NMI (nonmaskable interrupt) 
IRQO, 10-14 
software watchdog timer, 10-2 
SWT, 10-14 
NMSI (non-multiplexed serial interface) 
configuration, 20-33 
features list, 20-3 
overview, 20-33 
SMC NMSI connection, receive and transmit, 30-2 





O 


OE (output enable) signal, 12-10 

On-chip oscillators, 14-4 

Operand conventions, 5-1 

Operating environment architecture (OEA) 
description, 3-3 

Operations 
CPM timer operation, 17-5 
digital phase-locked loop (DPLL), 21-22 
Freeze, 10-33 
IDMA channels, 19-13 
low-power stop, 10-33 

ORN (option registers), 15-10 

Oscillators on-chip, 14-4 
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Output clocks, 14-9 


p 


Packaging on transfers, 13-23 
PADAT (port A data) register, 34-3 
PADIR (port A data direction) register, 34-4 
Page mode extended data-out interface, 15-71 
PAODR (port A open-drain register), 34-3 
PAPAR (port A signal assignment register), 34-5 
Parallel I/O ports 
port A 
block diagrams, 34-6 
configuration examples, 34-5 
overview, 34-2 
PADAT, 34-3 
PADIR, 34-4 
PAODR, 34-3 
PAPAR, 34-5 
pin assignments, 34-2 
port B 
overview, 34-7 
PBDAT, 34-9 
PBDIR, 34-10 
PBODR, 34-8 
PBPAR, 34-10 
pin assigments, 34-8 
port C | 
overview, 34-11 
PCDAT, 34-14 
PCDIR, 34-14 
PCINT, 34-16 
PCPAR, 34-15 
PCSO, 34-15 
pin assignments, 34-11 
port D 
overview, 34-17 
PDDAT, 34-18 
PDDIR, 34-18 
PDPAR, 34-19 
pin assignments, 34-17 
Parameter RAM 
communications processor (CP), 18-12 
HDLC mode, 23-3 
IDMA channels, 19-6 
RISC timer table, 18-14 
serial communications controllers (SCCs) 
all protocols, 21-14 
BISYNC mode, 26-4 
Ethernet mode, 27-8 
overview, 21-14 
UART mode, 22-4 
serial management controllers (SMCs) 
GCI mode, 30-33 
transparent mode, 30-7, 30-22 
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UART mode, 30-7, 30-11 
serial peripheral interface, 31-11 
USB controller, 32-7 
PBDAT (port B data) register, 34-9 
PBDIR (port B data direction) register, 34-10 
PBn (general-purpose port B bits) signals, 12-14 
PBODR (port B open-drain register), 34-8 


INDEX 


PBPAR (port B signal assignment register), 34-10 — 


PBRn (PCMCIA base register), 16-12 
PCDAT (port C data) register, 34-14 
PCDIR (port C data direction) register, 34-14 
PCINT (port C interrupt controller) register, 34-16 
PCMCIA interface 
DMA module, 16-7 
operation description, 16-5 
overview, 1-10, 16-1 
Power control, 16-7 
registers, 16-8 
signal definitions, 16-1 
timing examples, 16-15 
PCn (general-purpose port C bits) signals, 12-15 | 
PCPAR (port C signal assignment register), 34-15 
PCSO (port C special options) register, 34-15 
PDDAT (port D data) register, 34-18 
PDDIR (port D data direction) register, 34-18 
PDPAR (port D signal assignment register), 34-19 
PER (PCMCIA interface enable register), 16-10 
Performance, tracking program flow, 36-1 
Periodic interrupt timer (PIT), 10-2, 10-30 
PGCRB (PCMCIA interface general control 
register B), 16-11 
PISCR (periodic interrupt status and control) 
register, 10-31 
PIT, see Periodic interrupt timer 
PITC (periodic count) register, 10-32 
PITR (periodic interrupt timer register), 10-32 
PLL loss of lock, 11-3 
PLPRCR (PLL, low-power, and reset control 
register), 14-29 
PORESET (power-on reset) signal, 12-10 
PORn (PCMCIA option register), 16-12 
Power control 
disabling SCC, 21-27 
low-power modes, 14-18 
overview, 1-12, 14-1 
Power supply signals, 12-18 
Power-on reset 
description, 11-2 
reset sequence, 11-3 
Power-on reset settings, 14-6 
PowerPC architecture 
decrementer, 10-22 
exceptions, 6-4 
execution units, 3-9 
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features summary, 3-2 

instruction list, D-1, D-17, D-27, D-39 
integer unit, 3-10 | 

levels of the architecture, 3-3 
load/store unit, 3-10 

MMU compliance, 8-2 

MPC850 implementation, 3-1, 3-14 
overview, 3-1 

programming levels, 3-3 

timebase, 10-3, 10-23 


PowerPC little-endian (PPC-LE) mode, A-6 


Pr 


ocessor control instructions, D-25 


Program flow, tracking, 36-1 
Program trace 


back trace, 36-5 

debug mode, 36-5 

description, 36-2 

indirect branch instructions, 36-5 
queue flush information, 36-4 
reconstruction, 36-5 

sequential instructions, 36-5 
signals, 36-3 

special cases, 36-4 

window trace, 36-6 


Programming examples 


GCI interface, 20-32 

SCCs 
asynchronous HDLC mode, 25-15 
Ethernet mode, 27-23 
HDLC bus protocol, 23-22 
IrDA mode, 29-8—29-10 
transparent mode, 28-13 
UART mode, 22-22 

SI RAM, 20-13 

USB controller, 32-21 


Programming the SIU, 10-5 
Promiscuous mode, SeeTransparent mode 
PSCR (PCMCIA interface status changed 


register), 16-9 


PSMR (protocol-specific mode register) 


AppleTalk mode, 24-4 

asynchronous HDLC mode, 25-11 
BISYNC mode, 26-10 

Ethernet mode, 27-15 

HDLC bus protocol, programming, 23- 22 
HDLC mode, 23-7 

overview, 21-10 

transparent mode, 28-8 

UART mode, 22-13 


PTR (program trace) signal, 13-4, 13-30 
PVR (processor version register), 4-8 
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RAM word, 15-36 
RCCR (RISC controller configuration register), 18-4 
RD/WR (read/write) signal, 12-5, 13-3, 13-30 
Real-time clock, 10-26 
Registers 
AppleTalk mode 
GSMR, 24-3 
PSMR, 24-4 
TODR, 24-4 
asynchronous HDLC mode 
DSR, 25-7 
GSMR, 25-6 
PSMR, 25-11 
SCCE, 25-9 
SCCM, 25-9 
SCCS, 25-10 
BAR, 36-38 
BISYNC mode 
BDLE, 26-8 
BSYNC, 26-7 
PSMR, 26-10 
SCCE, 26-15 
SCCM, 26-15 
SCCS, 26-16 
boundary scan register, 37-3 
cache control, 7-6 
clock/power control 
PLPRCR, 14-29 
SCCR, 14-27 
CMPA-CMPH, 36-37 
communications processor (CP) 
CPCR, 18-6 
RCCR, 18-4 
RMDS, 18-5 
RTER, 18-16 
RTMR, 18-16 
TM_CMD, 18-15 
communications processor module (CPM) 
TCNn, 17-10 
TCRn, 17-10 
TERN, 17-11 
TGCR, 17-8 
TMRn, 17-9 
TRRn, 17-10 
COUNTA/COUNTB, 36-43 
CPM interrupt controller 
CICR, 35-7 
CIMR, 35-9 
CIPR, 35-8 
CISR, 35-9 
CIVR, 35-10 
DC_ADR, 7-13 
DC_CST, 7-12 
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DC_DAT, 7-14 
debug, 36-36 
debug mode, 36-44 
DER, 36-46 
development port, 36-27 
development port shift, 36-27 
development support, 36-36 
DPDR, 36-47 
DSR 
overview, 21-10 
UART mode, 22-11 
Ethernet mode 
PSMR, 27-15 
SCCE, 27-21 
SCCM, 27-21 
GSMR 
asynchronous HDLC mode, 25-6 
overview, 21-4 
HDLC mode 
PSMR, 23-7 
SCCE, 23-12 
SCCM, 23-12 
SCCS, 23-14 
°C controller 
I2ZADD, 33-7 
I2BRG, 33-7 
I2CER, 33-8 
J2CMR, 33-8 
I2COM, 33-8 
I2MOD, 33-6 
IC_ADR, 7-8, 7-8 
IC_CST, 7-6, 7-9 
IC_DAT, 7-8 
ICR, 36-44 
ICTRL, 36-39 
IDMA channels 
DCMR, 19-7, 19-19 
DFCR, 19-11 
IDMRI1, 19-9, 19-20 
IDMR2, 19-9 
IDSR1, 19-8, 19-20 
IDSR2, 19-8 
SFCR, 19-11 
instruction register, 37-6 
IrDA mode 
IRMODE, 29-6 
IRSIP, 29-7 
key registers, 10-10 
LCTRL1, 36-40 
LCTRL2, 36-41 
M_CASID, 8-23 
M_TW, 8-24 
M_TWB, 8-23 
MD_CAM, 8-28 


MD_CTR, 8-17 
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MD_RAM, 8-29, 8-30 
MD_RPN, 8-22 
MD_TWC, 8-19 
memory controller 
BRn, 15-8 
MAR, 15-17 
MCR, 15-15 
MDR, 15-16 
MI_CAM, 8-25 
MI_CTR, 8-16 
MI_RAM, 8-27 
MI_RAMO, 8-26 
MI_RPN, 8-20 
MI_TWC, 8-18 
MMU debug, 8-25 
MPTPR, 15-17 
MSTAT, 15-13 
Mx_AP, 8-24 
Mx_EPN, 8-18 
MxMR, 15-13 
ORn, 15-10 
parallel I/O ports 
PADAT, 34-3 
PADIR, 34-4 
PAODR, 34-3 
PAPAR, 34-5 
PBDAT, 34-9 
PBDIR, 34-10 
PBODR, 34-8 
PBPAR, 34-10 
PCDAT, 34-14 
PCDIR, 34-14 
PCINT, 34-16 
PCPAR, 34-15 
PCSO, 34-15 
PDDAT, 34-18 
PDDIR, 34-18 
PDPAR, 34-19 
PCMCIA interface 
PBRn, 16-12 
PER, 16-10 
PGCRB, 16-11 
PORN, 16-12 
PSCR, 16-9 
PowerPC 
accessing SPRs, 4-11 
DEC, 10-23. 
not supported, 4-6 
overview, 4-1 
PISCR, 10-31 
PITC, 10-32 
PITR, 10-32 
RTC, 10-28 
RTCAL, 10-28 
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RTCSC, 10-27 
RTSEC, 10-29 
supervisor-level 
MSR, 4-6 
PVR, 4-8 
summary, 4-4, 4-8, C-2 
TBREFU/TBREEFL, 10-24 
TBSCR, 10-25 
TBU/TBL, 10-24 
user-level 
CR, 4-2 
summary, 4-2, C-1 
TBU/TBL, 4-4 
XER, 4-3 
PSMR 
asynchronous HDLC mode, 25-11 
BISYNC mode, 26-10 
Ethernet mode, 27-15 
overview, 21-10 
transparent mode, 28-8 
UART mode, 22-13 
quick reference guide, C-1 
register lock (KAPWR powered), 10-10, 14-26 
RFCR . 
overview, 21-16 
RSR, 11-5 
SCCE 
asynchronous HDLC mode, 25-9 
BISYNC mode, 26-15 
Ethernet mode, 27-21 
UART mode, 22-19 
SCCM 
asynchronous HDLC mode, 25-9 
BISYNC mode, 26-15 
Ethernet mode, 27-21 
UART mode, 22-19 
SCCS 
asynchronous HDLC mode, 25-10 
BISYNC mode, 26-16 
UART mode, 22-21 
SDMA channels 
SDAR, 19-5 
SDCR, 19-3 
SDMR, 19-5 
SDSR, 19-4 
serial communications controllers 
SCCE, 28-12 
SCCM, 28-12 
SCCS, 28-13 
transparent mode 
PSMR, 28-8 
serial interface 
BRGCn, 20-36 
SICMR, 20-22 
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SICR, 20-20 
SIGMR, 20-14 
SIMODE, 20-15 
SIRP, 20-23 
SISTR, 20-22 
serial management controllers 
GCI mode 
C/I channel RxBD, 30-36 
C/I channel TxBD, 30-36 
SMCE, 30-37 
SMCM, 30-37 
SMCMkRs, 30-3 
transparent mode 
SMCE, 30-30 
SMCM, 30-30 
UART mode 
RxBD, 30-15 
SMCE, 30-19 
SMCM, 30-19 
TxBD, 30-17 
serial peripheral interface 
RFCR, 31-12 
SPCOM, 31-10 
SPIE, 31-10 
SPIM, 31-10 
SPMODE, 31-7 
TFCR, 31-12 
settings after 
alignment exception, 6-8 
debug exception, 6-15 
decrementer exception, 6-10 
DTLB error exception, 6-14 
DTLB miss exception, 6-13 
external interrupt, 6-7 
ITLB error exception, 6-14 
ITLB miss exception, 6-13 
program exception, 6-9 
software emulation exception, 6-12 
system call exception, 6-11 
trace exception, 6-11 
system interface unit 
IMMR, 10-5 
SIEL, 10-17 
SIMASK, 10-16 
SIUMCR, 10-6 
SIVEC, 10-18 
SWSR, 10-22 
SYPCR, 10-8 
TESR, 10-9 
TECR, 36-27 
TFCR 
overview, 21-16 
TODR 
overview, 21-11 
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UART mode 
DSR, 22-11 
PSMR, 22-13 
SCCE, 22-19 
SCCM, 22-19 
SCCS, 22-21 
TOSEQ, 22-9 
USB controller 
CPCR, 32-19 
EPnPTR, 32-7 
RFCR, 32-9 
TFCR, 32-9 
USADDR, 32-10 
USBER, 32-12 
USBMR, 32-12 
USBS, 32-13 
USCOM, 32-12 
USEPn, 32-11 
USMOD, 32-9 
Reservation, 7-28 
Reservation, storage, 13-34 
Reset 
cache initialization, 7-29 
checkstop reset, 11-3 
debug port hard/soft reset, 11-3 
external HRESET, 11-2 
external SRESET, 11-2, 11-4 
internal HRESET, 11-2 
internal SRESET, 11-4 
JTAG reset, 11-3 
power-on reset, 11-2 
receiver reset sequence, SCC, 21-27 
reset clock source configuration, 14-16 
reset configuration, 11-6 
settings at power-on, 14-6 
software watchdog reset, 11-3 
transmitter reset sequence, SCC, 21-27 
Restart gate mode, 17-7 
RETRY (retry) signal, 13-36 
RFC1549 exceptions, 25-4 
RFCR (receive function code register) 
overview, 21-16 
serial peripheral interface, 31-12 
USB controller, 32-9 
RFCR (Rx buffer function code register) 
overview, 21-16 
RISC timer table, 18-13 
RMDS (RISC microcode development support 
control) register, 18-5 
Rotate and shift instructions, D-18—D-19 
RSR (reset status register), 11-5 
RSTCONF (reset configuration) signal, 12-10 
RSV (reservation transfer) signal, 12-6, 13-4, 13-30 
RTC (real-time clock) register, 10-28 
RTCAL (real-time clock alarm) register, 10-28 | 
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RTCSC (real-time clock status and control) 
register, 10-27 

RTER (RISC timer event register), 18-1 

RTMR (RISC timer mask register), 18-16 

RTSEC (real-time clock alarm seconds) 
register, 10-29 


Ss 


SAMPLE/PRELOAD instruction, 37-6 
SCCE (SCC event) register 
asynchronous HDLC, 25-9 
BISYNC mode, 26-15 
Ethernet mode, 27-21 
HDLC mode, 23-12 
transparent mode, 28-12 
UART mode, 22-19 
SCCM (SCC mask) register 
asynchronous HDLC, 25-9 
BISYNC mode, 26-15 
Ethernet mode, 27-21 
HDLC mode, 23-12 
transparent mode, 28-12 
UART mode, 22-19 
SCCR (system clock and reset control register), 14-27 
SCCS (SCC status) register 
asynchronous HDLC mode, 25-10 
BISYNC mode, 26-16 
HDLC mode, 23-14 
transparent mode, 28-13 
UART mode, 22-21 
SCCs, see Serial communications controllers (SCCs) 
SDAR (SDMA address register), 19-5 
SDCR (SDMA configuration register), 19-3 
SDMA channels . 
data paths, 19-1 
overview, 19-1 
registers, 19-3 
tranfers, 19-2 
U-bus arbitration, 19-2 
SDMR (SDMA mask register), 19-5 
SDSR (SDMA status register), 19-4 
Segment registers manipulation instructions, D-26 
Serial communications controllers (SCCs) 
AppleTalk mode 
connecting to AppleTalk, 24-3 
operating LocalTalk frame, 24-1 
overview, 24-1 
programming example, 24-4 
programming in AppleTalk, 24-3 
asynchronous HDLC mode 
channel implementation, 25-5 
decoding the receiver transparency, 25-3 
DSR configuration, 25-6 
encoding the transmitter transparency, 25-3 


error handling, 25-8 
features, 25-1 
frame reception processing, 25-2 
frame transmission processing, 25-2 
GSMR configuration, 25-6 
HDLC mode, differences, 25-14 
overview, 25-1 
programming example, 25-15 
programming the controller, 25-7 
receive commands, 25-8 
RxBD, 25-11 
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